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FOREWORD 



Pipeline system operators continuously work to improve the safety of their systems and opera- 
tions. In the United States, both liquid and gas pipeline operators have been working with their 
regulators for several years to develop a more systematic approach to pipeline safety integrity 
management. 

The gas pipeline industry needed to address many technical concerns before an integrity 
management standard could be written. A number of initiatives were undertaken by the industry 
to answer these questions; as a result of two years' intensive work by a number of technical 
experts in their fields, 20 reports were issued that provided the responses required to complete 
the 2002 edition of this Standard. (The list of these reports is included in the reference section 
of this Standard.) 

This Standard is nonmandatory and is designed to supplement B31.8, ASME Code for Pressure 
Piping, Gas Transmission and Distribution Piping Systems. Not all operators or countries will 
decide to implement this Standard. This Standard becomes mandatory if and when pipeline 
regulators include it as a requirement in their regulations. 

This Standard is a process standard, which describes the process an operator may use to develop 
an integrity management program. It also provides two approaches for developing an integrity 
management program: a prescriptive approach and a performance or risk-based approach. Pipe- 
line operators in a number of countries are currently utilizing risk-based or risk-management 
principles to improve the safety of their systems. Some of the international standards issued on 
this subject were utilized as resources for writing this Standard. Particular recognition is given 
to API and their liquids integrity management standard, API 1160, which was used as a model 
for the format of this Standard. 

The intent of this Standard is to provide a systematic, comprehensive, and integrated approach 
to managing the safety and integrity of pipeline systems. The task force that developed this 
Standard hopes that it has achieved that intent. 

This Supplement was approved by the B31 Standards Committee and by the ASME Board on 
Pressure Technology Codes and Standards. It was approved as an American National Standard 
on March 17, 2004. 
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MANAGING SYSTEM INTEGRITY OF GAS PIPELINES 



1 INTRODUCTION 

1.1 Scope 

This Standard applies to onshore pipeline systems 
constructed with ferrous materials and that transport 
gas. Pipeline system means all parts of physical facilities 
through which gas is transported, including pipe, 
valves, appurtenances attached to pipe, compressor 
units, metering stations, regulator stations, delivery sta- 
tions, holders, and fabricated assemblies. The principles 
and processes embodied in integrity management are 
applicable to all pipeline systems. 

This Standard is specifically designed to provide the 
operator (as defined in para. 13) with the information 
necessary to develop and implement an effective integ- 
rity management program utilizing proven industry 
practices and processes. The processes and approaches 
within this Standard are applicable to the entire pipeline 
system. 

1.2 Purpose and Objectives 

Managing the integrity of a gas pipeline system is the 
primary goal of every pipeline system operator. Opera- 
tors want to continue providing safe and reliable deliv- 
ery of natural gas to their customers without adverse 
effects on employees, the public, customers, or the envi- 
ronment. Incident-free operation has been and continues 
to be the gas pipeline industry's goal. The use of this 
Standard as a supplement to the ASME B31.8 Code will 
allow pipeline operators to move closer to that goal. 

A comprehensive, systematic, and integrated integrity 
management program provides the means to improve 
the safety of pipeline systems. Such an integrity manage- 
ment program provides the information for an operator 
to effectively allocate resources for appropriate preven- 
tion, detection, and mitigation activities that will result 
in improved safety and a reduction in the number of 
incidents. 

This Standard describes a process that an operator of 
a pipeline system can use to assess and mitigate risks 
in order to reduce both the likelihood and consequences 
of incidents. It covers both a prescriptive- and a perform- 
ance-based integrity management program. 

The prescriptive process, when followed explicitly, 
will provide all the inspection, prevention, detection, 
and mitigation activities necessary to produce a satisfac- 
tory integrity management program. This does not pre- 
clude conformance with the requirements of ASME 



B31.8. The performance-based integrity management 
program alternative utilizes more data and more exten- 
sive risk analyses, which enables the operator to achieve 
a greater degree of flexibility in order to meet or exceed 
the requirements of this Standard specifically in the areas 
of inspection intervals, tools used, and mitigation tech- 
niques employed. An operator cannot proceed with the 
performance-based integrity program until adequate 
inspections are performed that provide the information 
on the pipeline condition required by the prescriptive- 
based program. The level of assurance of a performance- 
based program or an alternative international standard 
must meet or exceed that of a prescriptive program. 

The requirements for prescriptive- and performance- 
based integrity management programs are provided in 
each of the paragraphs in this Standard. In addition, 
Nonmandatory Appendix A provides specific activities, 
by threat categories, that an operator shall follow in 
order to produce a satisfactory prescriptive integrity 
management program. 

This Standard is intended for use by individuals and 
teams charged with planning / implementing, and 
improving a pipeline integrity management program. 
Typically, a team will include managers, engineers, 
operating personnel, technicians, and /or specialists 
with specific expertise in prevention, detection, and mit- 
igation activities. 

13 Integrity Management Principles 

A set of principles is the basis for the intent and spe- 
cific details of this Standard. They are enumerated here 
so that the user of this Standard can understand the 
breadth and depth to which integrity shall be an integral 
and continuing part of the safe operation of a pipeline 
system. 

Functional requirements for integrity management 
shall be engineered into new pipeline systems from ini- 
tial planning, design, material selection, and construc- 
tion. Integrity management of a pipeline starts with 
sound design, material selection, and construction of 
the pipeline. Guidance for these activities is primarily 
provided in ASME B31.8. There are also a number of 
consensus standards that may be used, as well as pipe- 
line jurisdictional safety regulations. If a new line is to 
become a part of an integrity management program, the 
functional requirements for the line, including preven- 
tion, detection, and mitigation activities, shall be consid- 
ered in order to meet this Standard. Complete records 
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of material, design, and construction for the pipeline 
are essential for the initiation of a good integrity man- 
agement program. 

System integrity requires commitment by all 
operating personnel using comprehensive, systematic, 
and integrated processes to safely operate and maintain 
pipeline systems. In order to have an effective integrity 
management program, the program shall address the 
operator's organization, processes, and the physical 
system. 

An integrity management program is continuously 
evolving and must be flexible. An integrity management 
program should be customized to meet each operator's 
unique conditions. The program shall be periodically 
evaluated and modified to accommodate changes in 
pipeline operation, changes in the operating environ- 
ment, and the influx of new data and information about 
the system. Periodic evaluation is required to ensure 
the program takes appropriate advantage of improved 
technologies and that the program utilizes the best set 
of prevention, detection, and mitigation activities that 
are available for the conditions at that time. Additionally, 
as the integrity management program is implemented, 
the effectiveness of the activities shall be reassessed and 
modified to ensure the continuing effectiveness of the 
program and all its activities. 

Information integration is a key component for man- 
aging system integrity. A key element of the integrity 
management framework is the integration of all perti- 
nent information when performing risk assessments. 
Information that can impact an operator's understand- 
ing of the important risks to a pipeline system comes 
from a variety of sources. The operator is in the best 
position to gather and analyze this information. By ana- 
lyzing all of the pertinent information, the operator can 
determine where the risks of an incident are the greatest, 
and make prudent decisions to assess and reduce 
those risks. 

Risk assessment is an analytical process by which an 
operator determines the types of adverse events or con- 
ditions that might impact pipeline integrity. Risk assess- 
ment also determines the likelihood or probability of 
those events or conditions that will lead to a loss of 
integrity, and the nature and severity of the conse- 
quences that might occur following a failure. This analyt- 
ical process involves the integration of design, 
construction, operating, maintenance, testing, inspec- 
tion, and other information about a pipeline system. 
Risk assessments, which are the very foundation of an 
integrity management program, can vary in scope or 
complexity and use different methods or techniques. 
The ultimate goal of assessing risks is to identify the 
most significant risks so that an operator can develop 
an effective and prioritized prevention /detection/ miti- 
gation plan to address the risks. 

Assessing risks to pipeline integrity is a continuous 
process. The operator shall periodically gather new 7 or 



additional information and system operating experi- 
ence. These shall become part of revised risk assessments 
and analyses that in turn may require adjustments to 
the system integrity plan. 

New technology should be evaluated and imple- 
mented as appropriate. Pipeline system operators 
should avail themselves of new technology as it becomes 
proven and practical. New technologies may improve 
an operator's ability to prevent certain types of failures, 
detect risks more effectively, or improve the mitigation 
of risks. 

Performance measurement of the system and the pro- 
gram itself is an integral part of a pipeline integrity 
management program. Each operator shall choose sig- 
nificant performance measures at the beginning of the 
program and then periodically evaluate the results of 
these measures to monitor and evaluate the effectiveness 
of the program. Periodic reports of the effectiveness of 
an operator's integrity management program shall be 
issued and evaluated in order to continuously improve 
the program. 

Integrity management activities shall be communi- 
cated to the appropriate stakeholders. Each operator 
shall ensure that all appropriate stakeholders are given 
the opportunity to participate in the risk assessment 
process and that the results are communicated effec- 
tively. 

2 INTEGRITY MANAGEMENT PROGRAM OVERVIEW 

2.1 General 

This paragraph describes the required elements of an 
integrity management program. These program ele- 
ments collectively provide the basis for a comprehensive, 
systematic, and integrated integrity management pro- 
gram. The program elements depicted in Fig. 1 are 
required for all integrity management programs. 

This Standard requires that the operator document 
how its integrity management program will address the 
key program elements. This Standard utilizes recog- 
nized industry practices for developing an integrity 
management program. 

The process shown in Fig. 2 provides a common basis 
to develop (and periodically reevaluate) an operator- 
specific program. In developing the program, pipeline 
operators shall consider their companies' specific integ- 
rity management goals and objectives, and then apply 
the processes to assure that these goals are achieved. 
This Standard details two approaches to integrity man- 
agement: a prescriptive method and a performance- 
based method. 

The prescriptive integrity management method 
requires the least amount of data and analysis, and can 
be successfully implemented by following the steps pro- 
vided in this Standard and Nonmandatory Appendix 
A, The prescriptive method incorporates expected 
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Fig. 1 Integrity Management Program Elements 



worst-case indication growth to establish intervals 
between successive integrity assessments in exchange 
for reduced data requirements and less-extensive 
analysis. 

The performance-based integrity management 
method requires more knowledge of the pipeline, and 
consequently more data-intensive risk assessments and 
analyses can be completed. The resulting performance- 
based integrity management program can contain more 
options for inspection intervals, inspection tools, mitiga- 
tion, and prevention methods. The results of the per- 
formance-based method must meet or exceed the results 
of the prescriptive method. A performance-based pro- 
gram cannot be implemented until the operator has per- 
formed adequate integrity assessments that provide the 
data for a performance-based program. A performance- 
based integrity management program shall include the 
following in the integrity management plan: 

(a) a description of the risk analysis method 
employed 

(b) documentation of all of the applicable data for 
each segment and where it was obtained 

(c) a documented analysis for determining integrity 
assessment intervals and mitigation (repair and preven- 
tion) methods 

(d) a documented performance matrix that, in time, 
will confirm the performance-based options chosen by 
the operator 

The processes for developing and implementing a per- 
formance-based integrity management program are 
included in this Standard. 

There is no single "best" approach that is applicable 
to all pipeline systems for all situations. This Standard 
recognizes the importance of flexibility in designing 
integrity management programs and provides alterna- 
tives commensurate with this need. Operators may 
choose either a prescriptive- or a performance-based 



approach for their entire system, individual lines, seg- 
ments, or individual threats. The program elements 
shown in Fig. 1 are required for all integrity management 
programs. 

The process of managing integrity is an integrated 
and iterative process. Although the steps depicted in 
Fig. 2 are shown sequentially for ease of illustration, 
there is a. significant amount of information flow and 
interaction among the different steps. For example, the 
selection of a risk assessment approach depends in part 
on what integrity-related data and information is avail- 
able. While performing a risk assessment, additional 
data needs may be identified to more accurately evaluate 
potential threats. Thus, the data gathering and risk 
assessment steps are tightly coupled and may require 
several iterations until an operator has confidence that 
a satisfactory assessment has been achieved. 

A brief overview of the individual process steps is 
provided in para. 2, as well as instructions to the more 
specific and detailed description of the individual ele- 
ments comprising the remainder of this Standard. Refer- 
ences to the specific detailed paragraphs in this Standard 
are shown in Figs, 1 and 2, 

2.2 Integrity Threat Classification 

The first step in managing integrity is identifying 
potential threats to integrity. All threats to pipeline integ- 
rity shall be considered. Gas pipeline incident data has 
been analyzed and classified by the Pipeline Research 
Committee International (PRCI) into 22 root causes. Each 
of the 22 causes represents a threat to pipeline integrity 
that shall be managed. One of the causes reported by 
operators is "unknown''; that is, no root cause or causes 
were identified. The remaining 21 threats have been 
grouped into nine categories of related failure types 
according to their nature and growth characteristics, and 
further delineated by three time-related defect types. 
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Fig. 2 integrity Management Plan Process Flow Diagram 



The nine categories are useful in identifying potential 
threats. Risk assessment, integrity assessment, and miti- 
gation activities shall be correctly addressed according 
to the time factors and failure mode grouping. 

(a) Time-Dependent 

(1) external corrosion 

(2) internal corrosion 

(3) stress corrosion cracking 

(b) Stable 

(1) manufacturing related defects 

(a) defective pipe seam 

(b) defective pipe 

(2) welding/ fabrication related 

(a) defective pipe girth weld 

(b) defective fabrication weld 

(c) wrinkle bend or buckle 



id) stripped threads/broken pipe/coupling 
failure 

(3) equipment 

(a) gasket O-ring failure 

(b) control /relief equipment malfunction 

(c) seal /pump packing failure 

(d) miscellaneous 
(c) Time-Indepen dent 

(1) third party /mechanical damage 

(a) damage inflicted by first, second, or third par- 
ties (instantaneous/ immediate failure) 

(b) previously damaged pipe (delayed failure 
mode) 

(c) vandalism 

(2) incorrect operational procedure 

(3) weather-related and outside force 
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(a) cold weather 

(b) lightning 

(c) heavy rains or floods 

(d) earth movements 

The interactive nature of threats (i.e., more than one 
threat occurring on a section of pipeline at the same 
time) shall also be considered. An example of such an 
interaction is corrosion at a location that also has third- 
party damage. 

Historically, metallurgical fatigue has not been a sig- 
nificant issue for gas pipelines. However, if operational 
modes change and pipeline segments operate with sig- 
nificant pressure fluctuations, fatigue shall be consid- 
ered by the operator as an additional factor. 

The operator shall consider each threat individually 
or in the nine categories when following the process 
selected for each pipeline system or segment. The pre- 
scriptive approach delineated in Nonmandatory Appen- 
dix A enables the operator to conduct the threat analysis 
in the context of the nine categories. All 21 threats shall 
be considered when applying the performance-based 
approach. 

23 The Integrity Management Process 

The integrity management process depicted in Fig. 2 
is described below. 

2.3.1 Identify Potential Pipeline Impact by Threat. 

This program element involves the identification of 
potential threats to the pipeline, especially in areas of 
concern. Each identified pipeline segment shall have the 
threats considered individually or by the nine categories. 
See para. 2.2. 

2.3.2 Gathering, Reviewing, and Integrating Data. The 

first step in evaluating the potential threats for a pipeline 
system or segment is to define and gather the necessary 
data and information that characterize the segments and 
the potential threats to that segment. In this step, the 
operator performs the initial collection, review, and inte- 
gration of relevant data and information that is needed 
to understand the condition of the pipe, identify the 
location-specific threats to its integrity, and understand 
the public, environmental, and operational conse- 
quences of an incident. The types of data to support a 
risk assessment will vary depending on the threat being 
assessed. Information on the operation, maintenance, 
patrolling, design, operating history, and specific fail- 
ures and concerns that are unique to each system and 
segment will be needed. Relevant data and information 
also include those conditions or actions that affect defect 
growth (e.g., deficiencies in cathodic protection), reduce 
pipe properties (e.g., field welding), or relate to the intro- 
duction of new defects (e.g., excavation work near a 
pipeline). Paragraph 3 provides information on conse- 
quences. Paragraph 4 provides details for data gather- 
ing, review, and integration of pipeline data. 



2.3.3 Risk Assessment. In this step, the data assem- 
bled from the previous step are used to conduct a risk 
assessment of the pipeline system or segments. Through 
the integrated evaluation of the information and data 
collected in the previous step, the risk assessment pro- 
cess identifies the location-specific events and /or condi- 
tions that could lead to a pipeline failure, and provides 
an understanding of the likelihood and consequences 
(see para. 3) of an event. The output of a risk assessment 
should include the nature and location of the most signif- 
icant risks to the pipeline. 

Under the prescriptive approach, available data are 
compared to prescribed criteria (see Nonmandatory 
Appendix A). Risk assessments are required in order to 
rank the segments for integrity assessments. The per- 
formance-based approach relies on detailed risk assess- 
ments. There are a variety of risk assessment methods 
that can be applied based on the available data and the 
nature of the threats. The operator should tailor the 
method to meet the needs of the system. An initial 
screening risk assessment can be beneficial in terms of 
focusing resources on the most important areas to be 
addressed and where additional data may be of value. 
Paragraph 5 provides details on the criteria selection for 
the prescriptive approach and risk assessment for the 
performance-based approach. The results of this step 
enable the operator to prioritize the pipeline segments 
for appropriate actions that will be defined in the integ- 
rity management plan. Nonmandatory Appendix A pro- 
vides the steps to be followed for a prescriptive program. 

2.3.4 Integrity Assessment. Based on the risk assess- (04) 
ment made in the previous step, the appropriate integ- 
rity assessments are selected and conducted. The 
integrity assessment methods are in-line inspection, 
pressure testing, direct assessment, or other integrity 
assessment methods, as defined in para. 6.5. Integrity 
assessment method selection is based on the threats that 
have been identified. More than one integrity assessment 
method may be required to address all the threats to a 
pipeline segment. 

A performance-based program may be able, through 
appropriate evaluation and analysis, to determine alter- 
native courses of action and time frames for performing 
integrity assessments. It is the operators' responsibility 
to document the analyses justifying the alternative 
courses of action or time frames. Paragraph 6 provides 
details on tool selection and inspection. 

Data and information from integrity assessments for 
a specific threat may be of value when considering the 
presence of other threats and performing risk assessment 
for those threats. For example, a dent may be identified 
when running a magnetic flux leakage (MFL) tool while 
checking for corrosion. This data element should be inte- 
grated with other data elements for other threats, such 
as third-party or construction damage. 
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Indications that are discovered during inspections 
shall be examined and evaluated to determine if they 
are actual defects or not. Indications may be evaluated 
using an appropriate examination and evaluation tool. 
For local internal or external metal loss, ASME B31G or 
similar analytical methods may be used. 

2.3.5 Responses to Integrity Assessment, Mitigation 
(Repair and Prevention), and Setting inspection Inter- 
vals. In this step, schedules to respond to indications 
from inspections are developed. Repair activities for the 
anomalies discovered during inspection are identified 
and initiated. Repairs are performed in accordance with 
accepted industry standards and practices. 

Prevention practices are also implemented in this step. 
For third-party damage prevention and low-stress pipe- 
lines, mitigation may be an appropriate alternative to 
inspection. For example, if damage from excavation was 
identified as a significant risk to a particular system or 
segment, the operator may elect to conduct damage- 
prevention activities such as increased public communi- 
cation, more effective excavation notification systems, 
or increased excavator awareness in conjunction with 
inspection. 

The mitigation alternatives and implementation time- 
frames for performance-based integrity management 
programs may vary from the prescriptive requirements. 
In such instances, the performance-based analyses that 
lead to these conclusions shall be documented as part 
of the integrity management program. Paragraph 7 pro- 
vides details on repair and prevention techniques. 

2.3.6 Update, Integrate, and Review Data. After the 
initial integrity assessments have been performed, the 
operator has improved and updated information about 
the condition of the pipeline system or segment. This 
information shall be retained and added to the database 
of information used to support future risk assessments 
and integrity assessments. Furthermore, as the system 
continues to operate, additional operating, maintenance, 
and other information is collected, thus expanding and 
improving the historical database of operating expe- 



2.3.7 Reassess Risk. Risk assessment shall be per- 
formed periodically within regular intervals, and when 
substantial changes occur to the pipeline. The operator 
shall consider recent operating data, consider changes 
to the pipeline system design and operation, analyze 
the impact of any external changes that may have 
occurred since the last risk assessment, and incorporate 
data from risk assessment activities for other threats. 
The results of integrity assessment, such as internal 
inspection, shall also be factored into future risk assess- 
ments, to assure that the analytical process reflects the 
latest understanding of pipe condition. 



2.4 Integrity Management Program 

The essential elements of an integrity management 
program are depicted in Fig. I and are described below. 

2.4.1 Integrity Management Plan. The integrity man- 
agement plan is the outcome of applying the process 
depicted in Fig. 2 and discussed in para. 8. The plan is 
the documentation of the execution of each of the steps 
and the supporting analyses that are conducted. The 
plan shall include prevention, detection, and mitigation 
practices. The plan shall also have a schedule established 
that considers the timing of the practices deployed. 
Those systems or segments with the highest risk should 
be addressed first. Also, the plan shall consider those 
practices that may address more than one threat. For 
instance, a hydrostatic test may demonstrate a pipeline's 
integrity for both time-dependent threats like internal 
and external corrosion as well as static threats such as 
seam weld defects and defective fabrication welds. 

A performance-based integrity management plan con- 
tains the same basic elements as a prescriptive plan. A 
performance-based plan requires more detailed infor- 
mation and analyses based on more extensive knowl- 
edge about the pipeline. This Standard does not require 
a specific risk analysis model, only that the risk model 
used can be shown to be effective. The detailed risk 
analyses will provide a better understanding of integrity, 
which will enable an operator to have a greater degree 
of flexibility in the timing and methods for the imple- 
mentation of a performance-based integrity manage- 
ment plan. Paragraph 8 provides details on plan 
development. 

The plan shall be periodically updated to reflect new 
information and the current understanding of integrity 
threats. As new risks or new manifestations of pre- 
viously known risks are identified, additional mitigative 
actions to address these risks shall be performed, as 
appropriate. Furthermore, the updated risk assessment 
results shall also be used to support scheduling of future 
integrity assessments. 

2.4.2 Performance Plan. The operator shall collect (04) 
performance information and periodically evaluate the 
success of its integrity assessment techniques, pipeline 
repair activities, and the mitigative risk control activi- 
ties. The operator shall also evaluate the effectiveness 

of its management systems and processes in supporting 
sound integrity management decisions. Paragraph 9 
provides the information required for developing per- 
formance measures to evaluate program effectiveness. 
The application of new technologies into the integrity 
management program shall be evaluated for further use 
in the program. 

2.4.3 Communications Plan. The operator shall 
develop and implement a plan for effective communica- 
tions with employees, the public, emergency responders, 
local officials, and jurisdictional authorities in order to 
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keep the public informed about their integrity manage- 
ment efforts. This plan shall provide information to be 
communicated to each stakeholder about the integrity 
plan and the results achieved. Paragraph 10 provides 
further information about communications plans. 

2.4.4 Management of Change Plan. Pipeline systems 
and the environment in which they operate are seldom 
static. A systematic process shall be used to ensure that, 
prior to implementation, changes to the pipeline system 
design, operation, or maintenance are evaluated for their 
potential risk impacts, and to ensure that changes to the 
environment in which the pipeline operates are evalu- 
ated. After these changes are made, they shall be incor- 
porated, as appropriate, into future risk assessments to 
ensure that the risk assessment process addresses the 
systems as currently configured, operated, and main- 
tained. The results of the plan's mitigative activities 
should be used as a feedback for systems and facilities 
design and operation. Paragraph 11 discusses the impor- 
tant aspects of managing changes as they relate to integ- 
rity management. 

2.4.5 Quality Control Plan. Paragraph 12 discusses 
the evaluation of the integrity management program for 
quality control purposes. That paragraph outlines the 
necessary documentation for the integrity management 
program. The paragraph also discusses auditing of the 
program, including the processes, inspections, mitiga- 
tion activities, and prevention activities. 

3 CONSEQUENCES 

3.1 General 

Risk is the mathematical product of the likelihood 
(probability) and the consequences of events that result 
from a failure. Risk may be decreased by reducing either 
the likelihood or the consequences of a failure, or both. 
This paragraph specifically addresses the consequence 
portion of the risk equation. The operator shall consider 
consequences of a potential failure when prioritizing 
inspections and mitigation activities. 

The B31.8 Code manages risk to pipeline integrity by 
adjusting design and safety factors, and inspection and 
maintenance frequencies, as the potential consequences 
of a failure increase. This has been done on an empirical 
basis without quantifying the consequences of a failure. 

Paragraph 3.2 describes how to determine the area 
that is affected by a pipeline failure (potential impact 
area) in order to evaluate the potential consequences of 
such an event. The area impacted is a function of the 
pipeline diameter and pressure. 

3.2 Potential Impact Area 

The refined radius of impact for natural gas is calcu- 
lated using the formula 



r = 0.69 • djp 



(1) 



where 

d — outside diameter of the pipeline, in. 

p — pipeline segment's maximum allowable 

operating pressure (MAOP), psig 
r = radius of the impact circle, ft 

EXAMPLE: A 30 in. diameter pipe with a maximum allowable 
operating pressure of 1,000 psig has a potential impact radius of 
approximately 660 ft. 

r = 0.69 * d.Jp 

= 0.69 (30 in.)(l,000 lb/in. 2 ) 1/2 
- 654.6 ft - 660 ft 

Use of this equation shows that failure of a smaller 
diameter, lower pressure pipeline will affect a smaller 
area than a larger diameter, higher pressure pipeline. 
(See GRI-00/0189.) 

NOTE: 0.69 is the factor for natural gas. Other gases or rich natural 
gas shall use different factors. 

Equation (1) is derived from 
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In a performance-based program, the operator may 
consider alternate models that calculate impact areas 
and consider additional factors, such as depth of burial, 
that may reduce impact areas. The operator shall count 
the number of houses and individual units in buildings 
within the potential impact area. The potential impact 
area extends from the center of the first affected circle 
to the center of the last affected circle (see Fig. 3). This 
housing unit count can then be used to help determine 
the relative consequences of a rupture of the pipeline 
segment. 
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Potential impact area 
{within dashed lines) 
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660 ft 
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Pipeline 



GENERAL NOTE: This diagram represents the results for a 30 in. pipe with an MAOP of 1,000 psig. 

Fig. 3 Potential Impact Area 



The ranking of these areas is an important element of 
risk assessment. Determining the likelihood of failure is 
the other important element of risk assessment (see 
paras. 4 and 5). 

3.3 Consequence Factors to Consider 

When evaluating the consequences of a failure within 
the impact zone, the operator shall consider at least the 
following: 

(a) population density 

(b) proximity oi the population to the pipeline 
(including consideration of manmade or natural barriers 
that may provide some level of protection) 

(c) proximity of populations with limited or impaired 
mobility (e.g., hospitals, schools, child-care centers, 
retirement communities, prisons, recreation areas), par- 
ticularly in unprotected outside areas 

(d) property damage 

(e) environmental damage 

(f) effects of unignited gas releases 

(g) security of gas supply (e.g., impacts resulting from 
interruption of service) 

(h) public convenience and necessity 

(i) potential for secondary failures 

Note that the consequences may vary based on the 
richness of the gas transported and as a result of how 
the gas decompresses. The richer the gas, the more 
important defects and material properties are in model- 
ing the characteristics of the failure. 



4 GATHERING, REVIEWING, AND INTEGRATING 
DATA 

4.1 General 

This paragraph provides a systematic process for 
pipeline operators to collect and effectively utilize the 
data elements necessary for risk assessment. Compre- 
hensive pipeline and facility knowledge is an essential 
component of a performance-based integrity manage- 
ment program. In addition, information on operational 
history, the environment around the pipeline, mitigation 
techniques employed, and process /procedure reviews 
is also necessary. Data are a key element in the decision- 
making process required for program implementation. 
When the operator lacks sufficient data or where data 
quality is below requirements, the operator shall follow 
the prescriptive-based processes as shown in Nonman- 
datory Appendix A. 

Pipeline operator procedures, operation and mainte- 
nance plans, incident information, and other pipeline 
operator documents specify and require collection of 
data that are suitable for integrity /risk assessment. Inte- 
gration of the data elements is essential in order to obtain 
complete and accurate information needed for an integ- 
rity management program. 

4*2 Data Requirements 

The operator shall have a comprehensive plan for 
collecting all data sets. The operator must first collect 
the data required to perform a risk assessment (see para. 
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5). Implementation of the integrity management pro- 
gram will drive the collection and prioritization of addi- 
tional data elements required to more fully understand 
and prevent/mitigate pipeline threats. 

4.2.1 Prescriptive Integrity Management Programs. 

Limited data sets shall be gathered to evaluate each 
threat for prescriptive integrity management program 
applications- These data lists are provided in Nonman- 
datory Appendix A for each threat and summarized in 
Table 1. All of the specified data elements shall be avail- 
able for each threat in order to perform the risk assess- 
ment. If such data are not available, it shall be assumed 
that the particular threat applies to the pipeline segment 
being evaluated. 

4.2.2 Performance-Based Integrity Management Pro- 
grams. There is no standard list of required data ele- 
ments that apply to all pipeline systems for 
performance-based integrity management programs. 
However, the operator shall collect at a minimum, those 
data elements specified in the prescriptive-based pro- 
gram requirements. The quantity and specific data ele- 
ments will vary between operators and within a given 
pipeline system. Increasingly complex risk assessment 
methods applied in performance-based integrity man- 
agement programs require more data elements than 
those listed in Nonmandatory Appendix A. 

Initially, the focus shall be on collecting the data neces- 
sary to evaluate areas of concern and other specific areas 
of high risk. The operator will collect the data required 
to perform system-wide integrity assessments, and any 
additional data required for general pipeline and facility 
risk assessments. This data is then integrated into the 
initial data. The volume and types of data will expand 
as the plan is implemented over years of operation. 

4.3 Data Sources 

The data needed for integrity management programs 
can be obtained from within the operating company 
and from external sources (e.g., industry-wide data). 
Typically, the documentation containing the required 
data elements is located in design and construction doc- 
umentation, and current operational and maintenance 
records. 

A survey of all potential locations that could house 
these records maybe required to document what is avail- 
able, its form (including the units or reference system), 
and to determine if significant data deficiencies exist. If 
deficiencies are found, action to obtain the data can be 
planned and initiated relative to its importance. This 
may require additional inspections and field data collec- 
tion efforts. 

Existing management information system (MIS) or 
geographic information system. (GIS) databases and the 
results of any prior risk or threat assessments are also 
useful data sources. Significant insight can also be 
obtained from subject matter experts and those involved 



Table 1 Data Elements for Prescriptive Pipeline 
Integrity Program 



Category 



Data 



Attribute data Pipe wall thickness 

Diameter 

Seam type and joint factor 
Manufacturer 
Manufacturing date 
Material properties 
Equipment properties 

Construction Year of installation 

Bending method 
Joining method, process and inspection 

results 
Depth of cover 
Crossings/casings 
Pressure test 
Field coating methods 
Soil, backfill 
Inspection reports 
Cathodic protection installed 
Coating type 

Operational Gas quality 

Flow rate 
Normal maximum and minimum operating 

pressures 
Leak/failure history 
Coating condition 

CP (cathodic protection) system performance 
Pipe wall temperature 
Pipe inspection reports 
OD/ID corrosion monitoring 
Pressure fluctuations 
Regulator/relief performance 
Encroachments 
Repairs 
Vandalism 
External forces 

Inspection Pressure tests 

In-line inspections 

Geometry tool inspections 

Bell hole inspections 

CP inspections (CIS) 

Coating condition inspections (DCVG) 

Audits and reviews 



in the risk assessment and integrity management pro- 
gram processes. Root cause analyses of previous failures 
are a valuable data source. These may reflect additional 
needs in personnel training or qualifications. 

Valuable data for integrity management program 
implementation can also be obtained from external 
sources. These may include jurisdictional agency reports 
and databases that include information such as soil data, 
demographics, and hydrology, as examples. Research 
organizations can provide background on many pipe- 
line-related issues useful for application in an integrity 
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Table 2 Typical Data Sources for Pipeline 
Integrity Program 

Process and instrumentation drawings (P&ID) 

Pipeline alignment drawings 

Original construction inspector notes/records 

Pipeline aerial photography 

Facility drawings/maps 

As-built drawings 
Material certifications 
Survey reports/drawings 
Safety related condition reports 
Operator standards/specifications 

industry standards/specifications 
O&M procedures 
Emergency response plans 
Inspection records 
Test reports/records 

incident reports 
Compliance records 
Design/engineering reports 
Technical evaluations 
Manufacturer equipment data 



management program. Industry consortia and other 
operators can also be useful information sources. 

The data sources listed in Table 2 are necessary for 
integrity management program initiation. As the integ- 
rity management program is developed and imple- 
mented, additional data will become available. This will 
include inspection, examination, and evaluation data 
obtained from the integrity management program and 
data developed for the performance metrics covered in 
para. 9. 

4.4 Data Collection, Review, and Analysis 

A plan for collecting, reviewing, and analyzing the 
data shall be created and in place from the conception 
of the data collection effort. These processes are needed 
to verify the quality and consistency of the data. Records 
shall be maintained throughout the process that identify 
where and how unsubstantiated data is used in the 
risk assessment process, so its potential impact on the 
variability and accuracy of assessment results can be 
considered. This is often referred to as metadata or infor- 
mation about the data. 

Data resolution and units shall also be determined. 
Consistency in units is essential for integration. Every 
effort should be made to utilize all of the actual data 
for the pipeline or facility. Generalized integrity assump- 
tions used in place of specific data elements should be 
avoided. 

Another data collection consideration is whether the 
age of the data invalidates its applicability to the threat. 



Data pertaining to time-dependent threats such as corro- 
sion or stress corrosion cracking (SCC) may not be rele- 
vant if it was collected many years before the integrity 
management program was developed. Stable and time- 
independent threats do not have implied time depen- 
dence, so earlier data is applicable. 

The unavailability of identified data elements is not 
a justification for exclusion of a threat from the integrity 
management program. Depending on the importance 
of the data, additional inspection actions or field data 
collection efforts may be required. 

4.5 Data Integration 

Individual data elements shall be brought together 
and analyzed in their context to realize the full value 
of integrity management and risk assessment. A major 
strength of an effective integrity management program 
lies in its ability to merge and utilize multiple data 
elements obtained from several sources to provide an 
improved confidence that a specific threat may or may 
not apply to a pipeline segment. It can also lead to an 
improved analysis of overall risk. 

For integrity management program applications, one 
of the first data integration steps includes development 
of a common reference system (and consistent measure- 
ment units) that will allow data elements from various 
sources to be combined and accurately associated with 
common pipeline locations. For instance, in-line inspec- 
tion (ILI) data may reference the distance traveled along 
the inside of the pipeline (wheel count), which can be 
difficult to directly combine with over-the-line surveys 
such as close interval survey (CIS) that are referenced 
to engineering station locations. 

Table 1 describes data elements that can be evaluated 
in a structured manner to determine if a particular threat 
is applicable to the area of concern or the segment being 
considered. Initially, this can be accomplished without 
the benefit of inspection data and may only include the 
pipe attribute and construction data elements shown in 
Table 1. As other information such as inspection data 
becomes available, an additional integration step can be 
performed to confirm the previous inference concerning 
the validity of the presumed threat. Such data integra- 
tion is also very effective for assessing the need and 
type of mitigation measures to be used. 

Data integration can also be accomplished manually 
or graphically. An example of manual integration is the 
superimposing of scaled potential impact area circles 
(see para. 3) on pipeline aerial photography to determine 
the extent of the potential impact area. Graphical inte- 
gration can be accomplished by loading risk-related data 
elements into an MIS/GIS system and graphically over- 
laying them to establish the location of a specific threat. 
Depending on the data resolution used, this could be 
applied to local areas or larger segments. More-specific 
data integration software is also available that facilitates 
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use in combined analyses. The benefits of data integra- 
tion can be illustrated by the following hypothetical 
examples: 

EXAMPLES; 

(1) In reviewing I LI data, an operator suspects mechanical dam- 
age in the top quadrant of a pipeline in a cultivated field. It is also 
known that the farmer has been plowing in this area, and that 
the depth of cover may be reduced. Each of these facts taken 
individually provides some indication of possible mechanical dam- 
age, but as a group the result is more definitive. 

(2) An operator suspects that a possible corrosion problem exists 
on a large-diameter pipeline located in a populated area. However, 
a CIS indicates good cathodic protection coverage in the area. A 
direct current voltage gradient (DCVG) coating condition inspec- 
tion is performed and reveals that the welds w r ere tape-coated and 
are in poor condition. The CIS results did not indicate a potential 
integrity issue, but data integration prevented possibly incorrect 
conclusions. 



5 RISK ASSESSMENT 

5.1 Introduction 

Risk assessments shall be conducted for pipelines and 
related facilities. Risk assessments are required for both 
prescriptive- and performance-based integrity manage- 
ment programs. 

For prescriptive-based programs, risk assessments are 
primarily utilized to prioritize integrity management 
plan activities. They help to organize data and informa- 
tion to make decisions. 

For performance-based programs, risk assessments 
serve the following purposes: 

(a) to organize data and information to help operators 
prioritize and plan activities 

(b) to determine which inspection, prevention, 
and /or mitigation activities will be performed and 
when 

5.2 Definition 

The operator shall follow para. 5 in its entirety to 
conduct a performance-based integrity management 
program. A prescriptive-based integrity management 
program shall be conducted using the requirements 
identified in this paragraph and in Nonmandatory 
Appendix A. 

Risk is typically described as the product of two pri- 
mary factors: the failure likelihood (or probability) that 
some adverse event will occur and the resulting conse- 
quences of that event. One method of describing risk is 

Risk/ = Pj x Cj for a single threat 

9 

Risk = % (P; x C,-) for threat categories 1 to 9 

Total segment risk 
= P 1 x Q + P 2 x C 2 + . . . + P 9 x C 9 



where 



C = failure consequence 



P = failure likelihood 
1 to 9 - failure threat category (see para. 2.2) 

The risk analysis method used shall address all nine 
threat categories or each of the individual 21 threats to 
the pipeline system. Risk consequences typically con- 
sider components such as the potential impact of the 
event on individuals, property, business, and the envi- 
ronment, as shown in para. 3. 

53 Risk Assessment Objectives 

For application to pipelines and facilities, risk assess- 
ment has the following objectives: 

(a) prioritization of pipelines/ segments for schedul- 
ing integrity assessments and mitigating action 

(b) assessment of the benefits derived from mitigating 
action 

(c) determination of the most effective mitigation 
measures for the identified threats 

(d) assessment of the integrity impact from modified 
inspection intervals 

(e) assessment of the use of or need for alternative 
inspection methodologies 

(f) more effective resource allocation 

Risk assessment provides a measure that evaluates 
both the potential impact of different incident types and 
the likelihood that such events may occur. Having such 
a measure supports the integrity management process 
by facilitating rational and consistent decisions. Risk 
results are used to identify locations for integrity assess- 
ments and resulting mitigative action. Examining both 
primary risk factors (likelihood and consequences) 
avoids focusing solely on the most visible or frequently 
occurring problems while ignoring potential events that 
could cause significantly greater damage. Conversely, 
the process also avoids focusing on less likely cata- 
strophic events while overlooking more likely scenarios. 

5.4 Developing a Risk Assessment Approach 

As an integral part of any pipeline integrity manage- 
ment program, an effective risk assessment process shall 
provide risk estimates to facilitate decision-making. 
When properly implemented, risk assessment methods 
can be very powerful analytic methods, using a variety 
of inputs, that provide an improved understanding of 
the nature and locations of risks along a pipeline or 
within a facility. 

Risk assessment methods alone should not be com- 
pletely relied upon to establish risk estimates or to 
address or mitigate known risks. Risk assessment meth- 
ods should be used in conjunction with knowledgeable, 
experienced personnel (subject matter experts and peo- 
ple familiar with the facilities) that regularly review the 
data input, assumptions, and results of the risk assess- 
ments. Such experience-based reviews should validate 
risk assessment output with other relevant factors not 
included in the process, the impact of assumptions, or 
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the potential risk variability caused by missing or esti- 
mated data. These processes and their results shall be 
documented in the integrity management plan. 

An integral part of the risk assessment process is the 
incorporation of additional data elements or changes to 
facility data. To ensure regular updates, the operator 
shall incorporate the risk assessment process into 
existing field reporting, engineering, and facility map- 
ping processes and incorporate additional processes as 
required (see para. 11). 

5.5 Risk Assessment Approaches 

(a) In order to organize integrity assessments for pipe- 
line segments of concern, a risk priority shall be estab- 
lished. This risk value is comprised of a number 
reflecting the overall likelihood of failure and a number 
reflecting the consequences. The risk analysis can be 
fairly simple with values ranging from 1-3 (to reflect 
high, medium, and low likelihood and consequences) 
or can be more complex and involve a larger range to 
provide greater differentiation between pipeline seg- 
ments. Multiplying the relative likelihood and conse- 
quence numbers together provides the operator with a 
relative risk for the segment and a relative priority for 
its assessment. 

(b) An operator shall utilize one or more of the follow- 
ing risk assessment approaches consistent with the 
objectives of the integrity management program. These 
approaches are listed in a hierarchy of increasing com- 
plexity, sophistication, and data requirements. These 
risk assessment approaches are subject matter experts, 
relative assessments, scenario assessments, and probabi- 
listic assessments. The following paragraphs describe 
risk assessment methods for the four listed approaches: 

(1) Subject Matter Experts (SMEs). SMEs from the 
operating company or consultants, combined with infor- 
mation obtained from technical literature, can be used 
to provide a relative numeric value describing the likeli- 
hood of failure for each threat and the resulting conse- 
quences. The SMEs are utilized by the operator to 
analyze each pipeline segment, assign relative likelihood 
and consequence values, and calculate the relative risk. 

(2) Relative Assessment Models. This type of assess- 
ment builds on pipeline-specific experience and more 
extensive data, and includes the development of risk 
models addressing the known threats that have histori- 
cally impacted pipeline operations. Such relative or 
data-based methods use models that identify and quan- 
titatively weigh the major threats and consequences rele- 
vant to past pipeline operations. These approaches are 
considered relative risk models, since the risk results are 
compared with results generated from the same model. 
They provide a risk ranking for the integrity manage- 
ment decision process. These models utilize algorithms 
weighing the major threats and consequences, and pro- 
vide sufficient data to meaningfully assess them. Rela- 
tive assessment models are more complex and require 



more specific pipeline system data than subject matter 
expert-based risk assessment approaches. The relative 
risk assessment approach, the model, and the results 
obtained shall be documented in the integrity manage- 
ment program. 

(3) Scenario-Based Models. This risk assessment 
approach creates models that generate a description of 
an event or series of events leading to a level of risk, 
and includes both the likelihood and consequences from 
such events. This method usually includes construction 
of event trees, decision trees, and fault trees. From these 
constructs, risk values are determined. 

(4) Probabilistic Models. This approach is the most 
complex and demanding with respect to data require- 
ments. The risk output is provided in a format that is 
compared to acceptable risk probabilities established by 
the operator, rather than using a comparative basis. 

It is the operator's responsibility to apply the level of 
integrity/ risk analysis methods that meets the needs 
of the operator's integrity management program. More 
than one type of model may be used throughout an 
operator's system. A thorough understanding of the 
strengths and limitations of each risk assessment method 
is necessary before a long-term strategy is adopted. 

(c) All risk assessment approaches described above 
have the following common components: 

(1) they identify potential events or conditions that 
could threaten system integrity 

(2) they evaluate likelihood of failure and conse- 
quences 

(3) they permit risk ranking and identification of 
specific threats that primarily influence or drive the risk 

(4) they lead to the identification of integrity assess- 
ment and /or mitigation options 

(5) they provide for a data feedback loop mech- 
anism 

(6) they provide structure and continuous updating 
for risk reassessments 

Some risk assessment approaches consider the likeli- 
hood and consequences of damage, but they do not 
consider whether failure occurs as a leak or rupture. 
Ruptures have more potential for damage than leaks. 
Consequently, when a risk assessment approach does 
not consider whether a failure may occur as a leak or 
rupture, a worst-case assumption of rupture shall be 
made. 

5.6 Risk Analysis 

5.6.1 Risk Analysis for Prescriptive Integrity Manage- 
ment Programs. The risk analyses developed for a pre- 
scriptive integrity management program are used to 
prioritize the pipeline segment integrity assessments. 
Once the integrity of a segment is established, the rein- 
spection interval is specified in Table 3. The risk analyses 
for prescriptive integrity management programs use 
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Table 3 Integrity Assessment Intervals: 
Time-Dependent Threats, Prescriptive Integrity Management Plan 





Interval (Years) 




Criteria 








At or Above 30% up to 




Inspection Technique 


[Note (1)] 


At or Above 50% SMYS 


50% SMYS 


Less Than 30% SMYS 


Hydrostatic testing 


5 


TP to 1.25 times MAOP 


TPto 1.4 times MAOP 


TPto 1.7 times MAOP 






[Note (2)] 


[Note (2)] 


[Note (2)] 




10 


TPto 1.39 times MAOP 


TPto 1.7 times MAOP 


TP to 2.2 times MAOP 






[Note (2)] 


[Note (2)] 


[Note (2)] 




15 


Not allowed 


TP to 2.0 times MAOP 
[Note (2)] 


TP to 2.8 times MAOP 
[Note (2)] 




20 


Not allowed 


Not allowed 


TP to 3.3 times MAOP 
[Note (2)] 


In-line inspection 


5 


P f above 1.25 times 


Pf above 1.4 times 


Pf above 1.7 times 






MAOP [Note (3)] 


MAOP [Note (3)] 


MAOP [Note (3)3 




10 


Pf above 1.39 times 


Pf above 1.7 times 


P f above 2.2 times 






MAOP [Note (3)3 


MAOP [Note (3)] 


MAOP [Note (3)3 




15 


Not allowed 


Pf above 2.0 times 
MAOP [Note (3)] 


Pf above 2.8 times 
MAOP [Note (3)3 




20 


Not allowed 


Not allowed 


Pf above 3.3 times 
MAOP [Note (3)] 


Direct assessment 


5 


Sample of indications 


Sample of indications 


Sample of indications 






examined [Note (4)] 


examined [Note (4)] 


examined [Note (4)] 




10 


All indications examined 


Sample of indications 
examined [Note (4)] 


Sample of indications 
examined [Note (4)3 




15 


Not allowed 


All indications examined 


All indications examined 




20 


Not allowed 


Not allowed 


All indications examined 



NOTES: 

(1) Intervals are maximum and may be less, depending on repairs made and prevention activities instituted. In addition, 
certain threats can be extremely aggressive and may significantly reduce the interval between inspections. Occurrence 
of a time-dependent failure requires immediate reassessment of the interval. 

(2) TP is test pressure. 

(3) Pf is predicted failure pressure as determined from ASME B31G or equivalent. 

(4) For the Direct Assessment Process, the intervals for direct examination of indications are contained within the process. 
These intervals provide for sampling of indications based on their severity and the results of previous examinations. 
Unless all indications are examined and repaired, the maximum interval for reinspection is 5 years for pipe operating at 
or above 50% SMYS and 10 years for pipe operating below 50% of SMYS. 



minimal data sets. They cannot be used to increase the 
reinspection intervals. 

When the operator follows the prescriptive reinspec- 
tion intervals, the more simplistic risk assessment 
approaches provided in para. 5.5 are considered appro- 
priate. 

5.6.2 Risk Analysis for Performance-Based Integrity 
Management Programs. Performance-based integrity 
management programs shall prioritize initial integrity 
assessments utilizing any of the methods described in 
para. 5.5. 

Risk analyses for performance-based integrity man- 
agement programs may also be used as a basis for estab- 
lishing inspection intervals. Such risk analyses will 
require more data elements than required in Nonmanda- 
tory Appendix A and more detailed analyses. The results 



of these analyses may also be used to evaluate alterna- 
tive mitigation and prevention methods and their 
timing. 

An initial strategy for an operator with minimal expe- 
rience using structured risk analysis methods may 
include adopting a more simple approach for the short 
term, such as knowledge-based or a screening relative 
risk model. As additional data and experience are 
gained, the operator can transition to a more comprehen- 
sive method. 

5.7 Characteristics of an Effective Risk Assessment 
Approach 

Considering the objectives summarized in para. 5.3, 
a number of general characteristics exist that will con- 
tribute to the overall effectiveness of a risk assessment 
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for either prescriptive or performance-based integrity 
management programs. These characteristics shall 
include the following: 

(a) Attributes. Any risk assessment approach shall 
contain a defined logic and be structured to provide a 
complete, accurate, and objective analysis of risk. Some 
risk methods require a more rigid structure (and consid- 
erably more input data). Knowledge-based methods are 
less rigorous to apply and require more input from 
subject-matter experts. They shall all follow an estab- 
lished structure and consider the nine categories of pipe- 
line threats and consequences. 

(b) Resources. Adequate personnel and time shall be 
allotted to permit implementation of the selected 
approach and future considerations. 

(c) Operating/Mitigation History. Any risk assessment 
shall consider the frequency and consequences of past 
events. Preferably, this should include the subject pipe- 
line system or a similar system, but other industry data 
can be used where sufficient data is initially not avail- 
able. In addition, the risk assessment method shall 
account for any corrective or risk mitigation action that 
has occurred previously. 

(d) Predictive Capability. To be effective, a risk assess- 
ment method should be able to identify pipeline integ- 
rity threats previously not considered. It shall be able to 
make use of (or integrate) the data from various pipeline 
inspections to provide risk estimates that may result 
from threats that have not been previously recognized 
as potential problem areas. Another valuable approach 
is the use of trending, where the results of inspections, 
examinations, and evaluations are collected over time 
in order to predict future conditions. 

(e) Risk Confidence. Any data applied in a risk assess- 
ment process shall be verified and checked for accuracy 
(see para. 12). Inaccurate data will produce a less accu- 
rate risk result. For missing or questionable data, the 
operator should determine and document the default 
values that will be used and why they were chosen. The 
operator should choose default values that conserva- 
tively reflect the values of other similar segments on the 
pipeline or in the operator's system. These conservative 
values may elevate the risk of the pipeline and encourage 
action to obtain accurate data. As the data are obtained, 
the uncertainties will be eliminated and the resultant 
risk values may be reduced. 

(f) Feedback. One of the most important steps in an 
effective risk analysis is feedback. Any risk assessment 
method shall not be considered as a static tool, but as 
a process of continuous improvement. Effective feed- 
back is an essential process component in continuous 
risk model validation. In addition, the model shall be 
adaptable and changeable to accommodate new threats. 

(g) Documentation. The risk assessment process shall 
be thoroughly and completely documented, to provide 



the background and technical justification for the meth- 
ods and procedures used and their impact on decisions 
based on the risk estimates. Like the risk process itself, 
such a document should be periodically updated as 
modifications or risk process changes are incorporated. 

(h) "What if Determinations. An effective risk model 
should contain the structure necessary to perform "what 
if calculations. This structure can provide estimates of 
the effects of changes over time and the risk reduction 
benefit from maintenance or remedial actions. 

(i) Weighting Factors. All threats and consequences 
contained in a relative risk assessment process should 
not have the same level of influence on the risk estimate. 
Therefore, a structured set of weighting factors shall be 
included that indicate the value of each risk assessment 
component, including both failure probability and con- 
sequences. Such factors can be based on operational 
experience, the opinions of subject matter experts, or 
industry experience. 

(j) Structure. Any risk assessment process shall pro- (04) 
vide, as a minimum, the ability to compare and rank 
the risk results to support the integrity management 
program's decision process. It should also provide for 
several types of data evaluation and comparisons, estab- 
lishing which particular threats or factors have the most 
influence on the result. The risk assessment process shall 
be structured, documented, and verifiable. 

(k) Segmentation. An effective risk assessment process 
shall incorporate sufficient resolution of pipeline seg- 
ment size to analyze data as it exists along the pipeline. 
Such analysis will facilitate location of local high-risk 
areas that may need immediate attention. For risk assess- 
ment purposes, segment lengths can range from units 
of feet to miles, depending on the pipeline attributes, 
its environment, and other data. 

Another requirement of the model involves the ability 
to update the risk model to account for mitigation or 
other action that changes the risk in a particular length. 
This can be illustrated by assuming that two adjacent 
mile-long segments have been identified. Suppose a pipe 
replacement is completed from the midpoint of one seg- 
ment to some point within the other. In order to account 
for the risk reduction, the pipeline length comprising 
these two segments now becomes four risk analysis seg- 
ments. This is called dynamic segmentation. 

5.8 Risk Estimates Using Assessment Methods 

A description of various details and complexities asso- 
ciated with different risk assessment processes has been 
provided in para. 5.5. Operators that have not previously 
initiated a formal risk assessment process may find an 
initial screening to be beneficial. The results of this 
screening can be implemented within a short time frame 
and focus given to the most important areas. A screening 
risk assessment may not include the entire pipeline sys- 
tem, but be limited to areas with a history of problems 
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or where failure could result in the most severe conse- 
quences, such as areas of concern. Risk assessment and 
data collection may then be focused on the most likely 
threats without requiring excessive detail. A screening 
risk assessment suitable for this approach can include 
subject matter experts or simple relative risk models as 
described in para. 5.5. A group of subject-matter experts 
representing pipeline operations, engineering, and 
others knowledgeable of threats that may exist is assem- 
bled to focus on the potential threats and risk reduction 
measures that would be effective in the integrity man- 
agement program. 

Application of any type of risk analysis methodology 
shall be considered as an element of continuous process 
and not a one-time event. A specified period defined 
by the operator shall be established for a system-wide 
risk reevaluation, but shall not exceed the required maxi- 
mum interval in Table 3. Segments containing indica- 
tions that are scheduled for examination or that are to 
be monitored must be assessed within time intervals 
that will maintain system integrity. The frequency of the 
system-wide reevaluation must be at least annually, but 
may be more frequent, based on the frequency and 
importance of data modifications. Such a reevaluation 
should include all pipelines or segments included in 
the risk analysis process, to assure that the most recent 
inspection results and information is reflected in the 
reevaluation and any risk comparisons are on an 
equal basis. 

The processes and risk assessment methods used shall 
be periodically reviewed to ensure they continue to yield 
relevant, accurate results consistent with the objectives 
of the operator's overall integrity management program. 
Adjustments and improvements to the risk assessment 
methods will be necessary as more complete and accu- 
rate information concerning pipeline system attributes 
and history becomes available. These adjustments shall 
require a reanalysis of the pipeline segments included 
in the integrity management program, to ensure that 
equivalent assessments or comparisons are made. 

5.9 Data Collection for Risk Assessment 

Data collection issues have been discussed in para. 4. 
When analyzing the results of the risk assessments, the 
operator may find that additional data is required. Itera- 
tion of the risk assessment process may be required to 
improve the clarity of the results, as well as confirm the 
reasonableness of the results. 

Determining the risk of potential threats will result 
in specification of the minimum data set required for 
implementation of the selected risk process. If significant 
data elements are not available, modifications of the 
proposed model may be required after carefully 
reviewing the impact of missing data and taking into 
account the potential effect of uncertainties created by 
using required estimated values. An alternative could 



be to use related data elements in order to make an 
inferential threat estimate. 

5.10 Prioritization for Prescriptive-Based and 
Performance-Based Integrity Management 
Programs 

A first step in prioritization usually involves sorting 
each particular segment's risk results in decreasing order 
of overall risk. Similar sorting can also be achieved by 
separately considering decreasing consequences or fail- 
ure probability levels. The highest risk level segment 
shall be assigned a higher priority when deciding where 
to implement integrity assessment and /or mitigation 
actions. Also, the operator should assess risk factors that 
cause higher risk levels for particular segments. These 
factors can be applied to help select, prioritize, and 
schedule locations for inspection actions such as hydro- 
static testing, in-line inspection, or direct assessment. 
For example, a pipeline segment may rank extremely 
high for a single threat, but rank much lower for the 
aggregate of threats compared to all other pipeline seg- 
ments. Timely resolution of the single highest threat 
segment may be more appropriate than resolution of 
the highest aggregate threat segment. 

For initial efforts and screening purposes, risk results 
could be evaluated simply on a "high-medium-low" 
basis or as a numerical value. When segments being 
compared have similar risk values, the failure probabil- 
ity and consequences should be considered separately. 
This may lead to the highest consequence segment being 
given a higher priority. Factors including line availability 
and system throughput requirements can also influence 
prioritization. 

The integrity plan shall also provide for the elimina- 
tion of any specific threat from the risk assessment. For 
a prescriptive integrity management program, the mini- 
mum data required and the criteria for risk assessment 
in order to eliminate a threat from further consideration 
are specified in Nonmandatory Appendix A. Perform- 
ance-based integrity management programs that use 
more comprehensive analysis methods should consider 
the following in order to exclude a threat in a segment: 

(a) there is no history of a threat impacting the partic- 
ular segment or pipeline system 

(b) the threat is not supported by applicable industry 
data or experience 

(c) the threat is not implied by related data elements 

(d) the threat is not supported by like/similar 
analyses 

(e) the threat is not applicable to system or segment 
operating conditions 

More specifically, item (c) considers the application 
of related data elements to provide an indication of a 
threat's presence when other data elements may not 
be available. As an example, for the external corrosion 
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threat, multiple data elements such as soil type/mois- 
ture level, CP data, CIS data, CP current demand, and 
coating condition can all be used, or if one is unavailable 
a subset may be sufficient to determine whether the 
threat shall be considered for that segment. Item (d) 
considers the evaluation of pipeline segments with 
known and similar conditions that can be used as a basis 
for evaluating the existence of threats on pipelines with 
missing data. Item (e) allows for the fact that some pipe- 
line systems or segments are not vulnerable to some 
threats. For instance, based on industry research and 
experience, pipelines operating at low stress levels do 
not develop SCC-related failures. 

The unavailability of identified data elements is not 
a justification for exclusion of a threat from the integrity 
management program. Depending on the importance 
of the data, additional inspection actions or field data 
collection efforts may be required. In addition, a threat 
cannot be excluded without consideration given to the 
likelihood of interaction by other threats. For instance, 
cathodic protection shielding in rocky terrain where 
impressed current may not prevent corrosion in areas 
of damaged coating must be considered. 

When considering threat exclusion, a cautionary note 
applies to threats classified as time-dependent. 
Although such an event may not have occurred in any 
given pipeline segment, system, or facility, the fact that 
the threat is considered time-dependent should require 
very strong justification for its exclusion. Some threats, 
such as internal corrosion and SCC, may not be immedi- 
ately evident and can become a significant threat even 
after extended operating periods. 

(04) 5.11 Integrity Assessment and Mitigation 

The process begins with examining the nature of the 
most significant risks. The risk drivers for each high- 
risk segment should be considered in determining the 
most effective integrity assessment and /or mitigation 
option. Paragraph 6 discusses integrity assessment and 
para. 7 discusses options that are commonly used to 
mitigate threats. A recalculation of each segment's risk 
after integrity assessment and /or mitigation actions is 
required to ensure that the segment's integrity can be 
maintained to the next inspection interval. 

It is necessary to consider a variety of options or com- 
binations of integrity assessments and mitigation actions 
that directly address the primary threat(s). It is also 
prudent to consider the possibility of using new technol- 
ogies that can provide a more effective or comprehensive 
risk mitigation approach. 

(04) 5.12 Validation 

Validation of risk analysis results is one of the most 
important steps in any assessment process. This shall 
be done to assure that the methods used have produced 
results that are usable and are consistent with the opera- 
tor's and industry's experience. A reassessment of and 



modification to the risk assessment process shall be 
required if, as a result of maintenance or other activities, 
areas are found that are inaccurately represented by the 
risk assessment process. A risk validation process shall 
be identified and documented in the integrity manage- 
ment program. 

Risk result validations can be successfully performed 
by conducting inspections, examinations, and evalua- 
tions at locations that are indicated as either high risk 
or low risk, to determine if the methods are correctly 
characterizing the risks. Validation can be achieved by 
considering another location's information regarding 
the condition of a pipeline segment and the condition 
determined during maintenance action or prior remedial 
efforts. A special risk assessment performed using 
known data prior to the maintenance activity can indi- 
cate if meaningful results are being generated. 

6 INTEGRITY ASSESSMENT 

6.1 General 

Based on the priorities determined by risk assessment, 
the operator shall conduct integrity assessments using 
the appropriate integrity assessment methods. The 
integrity assessment methods that can be used are in- 
line inspection, pressure testing, direct assessment, or 
other methodologies provided in para. 6,5. The integrity 
assessment method is based on the threats to which the 
segment is susceptible. More than one method and/or 
tool maybe required to address all the threats in a pipe- 
line segment. Conversely, inspection using any of the 
integrity assessment methods may not be the appro- 
priate action for the operator to take for certain threats. 
Other actions, such as prevention, may provide better 
integrity management results. 

Paragraph 2 provides a listing of threats by three 
groups: time-dependent, stable, and time-independent. 
Time-dependent threats can typically be addressed by 
utilizing any one of the integrity assessment methods 
discussed in this paragraph. Stable threats, such, as 
defects that occurred during manufacturing, can typi- 
cally be addressed by pressure testing, while construc- 
tion and equipment threats can typically be addressed 
by examination and evaluation of the specific piece of 
equipment, component, or pipe joint. Random threats 
typically cannot be addressed through use of any of the 
integrity assessment methods discussed in this para- 
graph, but are subject to the prevention measures dis- 
cussed in para. 7. 

Use of a particular integrity assessment method may 
find indications of threats other than those that the 
assessment was intended to address. For example, the 
third-party damage threat is usually best addressed by 
implementation of prevention activities; however, an in- 
line inspection tool may indicate a dent in the top half of 
the pipe. Examination of the dent may be an appropriate 
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action in order to determine if the pipe was damaged 
due to third-party activity. 

It is important to note that some of the integrity assess- 
ment methods discussed in para. 6 only provide indica- 
tions of defects. Examination using visual inspection 
and a variety of nondestructive examination (NDE) tech- 
niques are required, followed by evaluation of these 
inspection results in order to characterize the defect. The 
operator may choose to go directly to examination and 
evaluation for the entire length of the pipeline segment 
being assessed, in lieu of conducting inspections. For 
example, the operator may wish to conduct visual exam- 
ination of aboveground piping for the external corrosion 
threat. Since the pipe is accessible for this technique and 
external corrosion can be readily evaluated, performing 
in-line inspection is not necessary. 

(04) 6.2 Pipeline In-Line Inspection 

In-line inspection (ILI) is an integrity assessment 
method used to locate and preliminarily characterize 
metal loss indications in a pipeline. The effectiveness of 
the ILI tool used depends on the condition of the specific 
pipeline section to be inspected and how well the tool 
matches the requirements set by the inspection objec- 
tives. The following paragraphs discuss the use of ILI 
tools for certain threats. 

6.2.1 Metal Loss Tools for the Internal and External 
Corrosion Threat. For these threats, the following tools 
can be used. Their effectiveness is limited by the technol- 
ogy the tool employs. 

(a) Magnetic Flux Leakage, Standard Resolution Tool. 
This is better suited for detection of metal loss than for 
sizing. Sizing accuracy is limited by sensor size. It is 
sensitive to certain metallurgical defects, such as scabs 
and slivers. It is not reliable for detection or sizing of 
most defects other than metal loss, and not reliable for 
detection or sizing of axially aligned metal-loss defects. 
High inspection speeds degrade sizing accuracy. 

(b) Magnetic Flux Leakage, High Resolution Tool This 
provides better sizing accuracy than standard resolution 
tools. Sizing accuracy is best for geometrically simple 
defect shapes. Sizing accuracy degrades wiiere pits are 
present or defect geometry becomes complex. There is 
some ability to detect defects other than metal loss, but 
ability varies w T ith defect geometries and characteristics. 
It is not generally reliable for axially aligned defects. 
High inspection speeds degrade sizing accuracy. 

(c) Ultrasonic Compression Wave Tool This usually 
requires a liquid couplant. It provides no detection or 
sizing capability where return signals are lost, which 
can occur in defects with rapidly changing profiles, some 
bends, and when a defect is shielded by a lamination. 
It is sensitive to debris and deposits on the inside pipe 
wall. High speeds degrade axial sizing resolution. 

(d) Ultrasonic Shear Wave Tool This requires a liquid 
couplant or a wheel-coupled system. Sizing accuracy is 



limited by the number of sensors and the complexity of 
the defect. Sizing accuracy is degraded by the presence 
of inclusions and impurities in the pipe wall. High 
speeds degrade sizing resolution. 

(e) Transverse Flux Tool This is more sensitive to axially 
aligned metal-loss defects than standard and high reso- 
lution MFL tools. It may also be sensitive to other axially 
aligned defects. It is less sensitive than standard and 
high resolution MFL tools to circumferentially aligned 
defects. It generally provides less sizing accuracy than 
high resolution MFL tools for most defect geometries. 
High speeds can degrade sizing accuracy. 

6.2.2 Crack Detection Tools for the Stress Corrosion 
Cracking Threat. For this threat, the following tools can 
be used. Their effectiveness is limited by the technology 
the tool employs. 

(a) Ultrasonic Shear Wave Tool This requires a liquid 
couplant or a wheel-coupled system. Sizing accuracy is 
limited by the number of sensors and the complexity of 
the crack colony. Sizing accuracy is degraded by the 
presence of inclusions and impurities in the pipe wall. 
High inspection speeds degrade sizing accuracy and 
resolution. 

(b) Transverse Flux Tool This is able to detect some 
axially aligned cracks, not including SCC, but is not 
considered accurate for sizing. High inspection speeds 
can degrade sizing accuracy. 

6.2.3 Metal Loss and Caliper Tools for Third-Party 
Damage and Mechanical Damage Threat. Dents and areas 
of metal loss are the only aspect of these threats for 
which ILI tools can be effectively used for detection and 
sizing. 

Deformation or geometry tools are most often used 
for detecting damage to the line involving deformation 
of the pipe cross section, which can be caused by con- 
struction damage, dents caused by the pipe settling onto 
rocks, third-party damage, and wrinkles or buckles 
caused by compressive loading or uneven settlement of 
the pipeline. 

The lowest-resolution geometry tool is the gaging pig 
or single-channel caliper-type tool. This type of tool is 
adequate for identifying and locating severe deforma- 
tion of the pipe cross section. A higher resolution is 
provided by standard caliper tools that record a channel 
of data for each caliper arm, typically 10 or 12 spaced 
around the circumference. This type of tool can be used 
to discern deformation severity and overall shape 
aspects of the deformation. With some effort, it is possi- 
ble to identify sharpness or estimate strains associated 
with the deformation using the standard caliper tool 
output. High-resolution tools provide the most detailed, 
information about the deformation. Some also indicate 
slope or change in slope, which can be useful for identi- 
fying bending or settlement of the pipeline. Third-party 
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damage that has rerounded under the influence of inter- 
nal pressure in the pipe may challenge the lower limits 
of reliable detection of both the standard and high-reso- 
lution tools. There has been limited success identifying 
third-party damage using magnetic-flux leakage tools. 
MFL tools are not useful for sizing deformations. 

6.2.4 All Other Threats. In-line inspection is typically 
not the appropriate inspection method to use for all 
other threats listed in para. 2. 

6.2.5 Special Considerations for the Use of irt-Line 
Inspection Tools 

(a) The following shall also be considered when 
selecting the appropriate tool: 

(1) Detection Sensitivity. Minimum defect size speci- 
fied for the ILI tool should be smaller than the size of 
the defect sought to be detected. 

(2) Classification. Differentiation between types of 
anomalies. 

(3) Sizing Accuracy. Enables prioritization and is a 
key to a successful integrity management plan. 

(4) Location Accuracy. Enables location of anomalies 
by excavation. 

(5) Requirements for Defect Assessment. Results of ILI 
have to be adequate for the specific operator's defect 
assessment program. 

(b) Typically, pipeline operators provide answers to 
a questionnaire provided by the ILI vendor that should 
list all the significant parameters and characteristics of 
the pipeline section to be inspected. Some of the more 
important issues that should be considered are as 
follows: 

(1) Pipeline Questionnaire. Review of pipe character- 
istics, such as steel grade, type of welds, length, diame- 
ter, wall thickness, elevation profiles, etc. Also, 
identification of any restrictions, bends, known ovalities, 
valves, unbarred tees, couplings, and chill rings the ILI 
tool may need to negotiate. 

(2) Launchers and Receivers. Should be reviewed for 
suitability, since ILI tools vary in overall length, com- 
plexity, geometry, and maneuverability. 

(3) Pipe Cleanliness. Can significantly affect data col- 
lection. 

(4) Type of Fluid. Gas or liquid, affecting the possible 
choice of technologies. 

(5) Flow Rate, Pressure, and Temperature. Flow rate 
of the gas will influence the speed of the ILI tool inspec- 
tion. If speeds are outside of the normal ranges, resolu- 
tion can be compromised. Total time of inspection is 
dictated by inspection speed, but is limited by the total 
capacity of batteries and data storage available on the 
tool. High temperatures can affect tool operation quality 
and should be considered. 

(6) Product Bypass/Supplement. Reduction of gas 
flow and speed reduction capability on the ILI tool may 
be a consideration in higher velocity lines. Conversely, 



the availability of supplementary gas where the flow 
rate is too low shall be considered. 

(c) The operator shall assess the general reliability of 
the ILI method by looking at the following: 

(1) confidence level of the ILI method (e.g., proba- 
bility of detecting, classifying, and sizing the anomalies) 

(2) history of the ILI method /tool 

(3) success rate/ failed surveys 

(4) ability of the tool to inspect the full length and 
full circumference of the section 

(5) ability to indicate the presence of multiple cause 
anomalies 

Generally, representatives from the pipeline operator 
and the ILI service vendor should analyze the goal and 
objective of the inspection, and match significant factors 
known about the pipeline and expected anomalies with 
the capabilities and performance of the tool. Choice of 
tool will depend on the specifics of the pipeline section 
and the goal set for the inspection. The operator shall 
outline the process used in the integrity management 
plan for the selection and implementation of the ILI 
inspections. 

6.2.6 Examination and Evaluation. Results of in-line (04) 
inspection only provide indications of defects, with 
some characterization of the defect. Screening of this 
information is required in order to determine the time 
frame for examination and evaluation. The time frame 
is discussed in para. 7. 

Examination consists of a variety of direct inspection 
techniques, including visual inspection, inspections 
using NDE equipment, and taking measurements, in 
order to characterize the defect in confirmatory excava- 
tions where anomalies are detected. Once the defect is 
characterized, the operator must evaluate the defect in 
order to determine the appropriate mitigation actions. 
Mitigation is discussed in para. 7. 

6.3 Pressure Testing 

Pressure testing has long been an industry-accepted 
method for validating the integrity of pipelines. This 
integrity assessment method can be both a strength test 
and a leak test. Selection of this method shall be appro- 
priate for the threats being assessed. 

ASME B31.8 contains details on conducting pressure 
tests for both post-construction testing and for subse- 
quent testing after a pipeline has been in service for a 
period of time. The Code specifies the test pressure to 
be attained and the test duration in order to address 
certain threats. It also specifies allowable test mediums 
and under what conditions the various test mediums 
can be used. 

The operator should consider the results of the risk 
assessment and the expected types of anomalies to deter- 
mine when to conduct inspections utilizing pressure 
testing. 
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6.3.1 Time-Dependent Threats. Pressure testing is 
appropriate for use when addressing time-dependent 
threats. Time-dependent threats are externa! corrosion/ 
internal corrosion/ stress corrosion cracking/ and other 
environmentally assisted corrosion mechanisms. 

(04) 63.2 Manufacturing and Related Defect Threats. Pres- 
sure testing is appropriate for use when addressing the 
pipe seam aspect of the manufacturing threat. Pressure 
testing shall comply with the requirements of ASME 
B31.8. This will define whether air or water shall be 
used. Seam issues have been known to exist for pipe 
with a joint factor of less than 1.0 (e.g., lap-welded pipe, 
hammer-welded pipe, and butt-welded pipe) or if the 
pipeline is comprised, of low-frequency welded electric 
resistance welded (ERW) pipe or flash-welded pipe. 

When raising the MAOP of a steel pipeline or when 
raising the operating pressure above the historical 
operating pressure (i.e., highest pressure recorded in 
5 years prior to the effective date of this Standard), 
pressure testing must be performed to address the 
seam issue. 

Pressure testing shall be in accordance with ASME 
B31.8, to at least 1.25 times the MAOP. ASME B31.8 
defines how to conduct tests for both post-construction 
and in-service pipelines. 

6.3.3 All Other Threats. Pressure testing is typically 
not the appropriate integrity assessment method to use 
for all other threats listed in para. 2. 

6.3.4 Examination and Evaluation. Any section of 
pipe that fails a pressure test shall be examined in order 
to evaluate that the failure was due to the threat which 
the test was intended to address. If the failure was due 
to another threat, the test failure information must be 
integrated with other information relative to the other 
threat and the segment reassessed for risk. 

6.4 Direct Assessment 

Direct assessment is an integrity assessment method 
utilizing a structured process through which the opera- 
tor is able to integrate knowledge of the physical charac- 
teristics and operating history of a pipeline system or 
segment with the results of inspection, examination, and 
evaluation, in order to determine the integrity. 

6.4.1 External Corrosion Direct Assessment (ECDA) for 
the External Corrosion Threat. External corrosion direct 
assessment can be used for determining integrity for 
the external corrosion threat on pipeline segments. The 
process integrates facilities data, and current and histori- 
cal field inspections and tests, with the physical charac- 
teristics of a pipeline. Nonintrusive (typically 
aboveground or indirect) inspections are used to esti- 
mate the success of the corrosion protection. The ECDA 
process requires direct examinations and evaluations. 
Direct examinations and evaluations confirm the ability 



of the indirect inspections to locate active and past corro- 
sion locations on the pipeline. Post-assessment is 
required to determine a corrosion rate to set the reinspec- 
tion interval, reassess the performance metrics and their 
current applicability, and ensure the assumptions made 
in the previous steps remain correct. 

The ECDA process therefore has the following four 
components: 

(a) pre-assessment 

(b) inspections 

(c) examinations and evaluations 

(d) post- assessment 

The focus of the ECDA approach described in this 
Standard is to identify locations where external corro- 
sion defects may have formed. It is recognized that evi- 
dence of other threats such as mechanical damage and 
stress corrosion cracking (SCC) may be detected during 
the ECDA process. While implementing ECDA and 
when the pipe is exposed, the operator is advised to 
conduct examinations for nonexternal corrosion threats. 

The prescriptive ECDA process requires the use of 
at least two inspection methods, verification checks by 
examination and evaluations, and post-assessment vali- 
dation. 

For more information on the ECDA process as an 
integrity assessment method, see Nonmandatory 
Appendix B, para. Bl. 

6.4.2 Internal Corrosion Direct Assessment Process 
(ICDA) for the Internal Corrosion Threat. Internal corro- 
sion direct assessment can be used for determining 
integrity for the internal corrosion threat on pipeline 
segments that normally carry dry gas but may suffer 
from short-term upsets of w T et gas or free water (or other 
electrolytes). Examinations of low points or at inclines 
along a pipeline, which force an electrolyte such as water 
to first accumulate, provide information about the 
remaining length of pipe. If these low points have not 
corroded, then other locations further downstream are 
less likely to accumulate electrolytes and therefore can 
be considered free from corrosion. These downstream 
locations would not require examination. 

Internal corrosion is most likely to occur where water 
first accumulates. Predicting the locations of water accu- 
mulation (if upsets occur) serves as a method for prio- 
ritizing local examinations. Predicting where water first 
accumulates requires knowledge about the multiphase 
flow behavior in the pipe, requiring certain data (see 
para. 4). ICDA applies between any feed points until a 
new input or output changes the potential for electrolyte 
entry or flow characteristics. 

Examinations are performed at locations where elec- 
trolyte accumulation is predicted. For most pipelines it is 
expected that examination by radiography or ultrasonic 
NDE will be required to measure the remaining wall 
thickness at those locations. Once a site has been 
exposed, internal corrosion monitoring method (s) [e.g.. 
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coupon, probe, ultrasonic (UT) sensor] may allow an 
operator to extend the reinspection interval and benefit 
from real-time monitoring in the locations most suscep- 
tible to internal corrosion. There may also be some appli- 
cations where the most effective approach is to conduct 
in-line inspection for a portion of pipe, and use the 
results to assess the downstream internal corrosion 
where in-line inspection cannot be conducted. If the 
locations most susceptible to corrosion are determined 
not to contain defects, the integrity of a large portion of 
pipeline mileage has been assured. 

For more information on the ICDA process as an integ- 
rity assessment method, see Nonmandatory Appendix 
B, para. B2. 

6.43 All Other Threats. Direct assessment is typically 
not the appropriate integrity assessment method to use 
for all other threats listed in para. 2. 

6.5 Other Integrity Assessment Methodologies 

Other proven integrity assessment methods may exist 
for use in managing the integrity of pipelines. For the 
purpose of this Standard, it is acceptable for an operator 
to use these inspections as an alternative to those listed 
above. 

For prescriptive-based integrity management pro- 
grams, the alternative integrity assessment shall be an 
industry-recognized methodology, and be approved and 
published by an industry consensus standards organi- 
zation. 

For performance-based integrity management pro- 
grams, techniques other than those published by consen- 
sus standards organizations may be utilized; however, 
the operator shall follow the performance requirements 
of this Standard and shall be diligent in confirming and 
documenting the validity of this approach to confirm 
that a higher level of integrity or integrity assurance 
was achieved. 

7 RESPONSES TO INTEGRITY ASSESSMENTS AND 
MITIGATION (REPAIR AND PREVENTION) 

7.1 General 

This paragraph covers the schedule of responses to the 
indications obtained by inspection (see para. 6), repair 
activities that can be affected to remedy or eliminate an 
unsafe condition, preventive actions that can be taken 
to reduce or eliminate a threat to the integrity of a pipe- 
line, and establishing the inspection interval. Inspection 
intervals are based on the characterization of defect indi- 
cations, the level of mitigation achieved, the prevention 
methods employed, and the useful life of the data, with 
consideration given to expected defect growth. 

Examination, evaluation, and mitigative actions shall 
be selected and scheduled to achieve risk reduction 
where appropriate in each segment wnthin the integrity 
management program. 



The integrity management program shall provide 
analyses of existing and newly implemented mitigation 
actions to evaluate their effectiveness and justify their 
use in the future. 

Table 4 includes a summary of some prevention and 
repair methods and their applicability to each threat. 

7.2 Responses to Pipeline In-Line Inspections 

An operator shall complete the response according to 
a prioritized schedule established by considering the 
results of a risk assessment and the severity of in-line 
inspection indications. The required response schedule 
interval begins at the time the condition is discovered. 

When establishing schedules, responses can be 
divided into the following three groups: 

(a) immediate: indication shows that defect is at fail- 
ure point 

(b) scheduled: indication shows defect is significant 
but not at failure point 

(c) monitored: indication shows defect will not fail 
before next inspection 

Upon receipt of the characterization of indications 
discovered during a successful in-line inspection, the 
operator shall promptly review the results for immediate 
response indications. Other indications shall be 
reviewed within 6 months and a response plan shall 
be developed. The plan shall include the methods and 
timing of the response (examination and evaluation). 
For scheduled or monitored responses, an operator may 
reinspect rather than examine and evaluate, provided 
the reinspection is conducted and results obtained 
within the specified time frame. 

7.2.1 Metal Loss Tools for Internal and External Corro- (04) 
sion. Indications requiring immediate response are those 
that might be expected to cause immediate or near-term 
leaks or ruptures based on their known or perceived 
effects on the strength of the pipeline. This would 
include any corroded areas that have a predicted failure 
pressure level less than 1.1 times the MAOP as deter- 
mined by ASME B31G or equivalent. Also in this group 
would be any metal-loss indication affecting a detected 
longitudinal seam, if that seam was formed by direct 
current or low-frequency electric resistance welding or 
by electric flash welding. The operator shall examine 
these indications within a period not to exceed 5 days 
following determination of the condition. After exami- 
nation and evaluation, any defect found to require repair 
or removal shall be promptly remediated by repair or 
removal unless the operating pressure is lowered to miti- 
gate the need to repair or remove the defect. 

Indications in the scheduled group are suitable for 
continued operation without immediate response pro- 
vided they do not grow to critical dimensions prior to 
the scheduled response. Indications characterized with 
a predicted failure pressure greater than 1.10 times the 
MAOP shall be examined and evaluated according to a 
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and Repair Methods 



Table 4 Acceptable Threat Prevention and Repair Methods 



Corrosion 
Third-Party Damage Related 



Equipment 



Incorrect 
Operation 



Weather 
Related 



Manufacture 



Construction 



Environ- 
O-Force ment 



Gask/ Strip/ Cont/ Seal/ 
TPD(IF) PDP Vand Ext Int Oring BP Rel Pack 



Pipe Fab 

CW L HR/F Seam Pipe Gweld Weld Coup WB/B 



Prevention/ Detection 

Aerial patrol X X 

Foot patrol X X 

VIsuai/mechanical inspection 
One-call system 
Compliance audit 

Design specifications 

Materials specifications 

Manufacturer inspection ... X 

Transportation inspection ... X 

Construction inspection ... X 

Preservice hydrostatic test 

Public education X 

O&M procedures ... X 

Operator training 

Increase marker frequency X X 

Strain monitoring 

External protection X X 

Maintain ROW X X 

Increased wall thickness X X 

Warning tape mesh X X 

CP monitor/maintain 
internal cleaning 
Leakage control measures 
Pig-GPS/strain measurement 
Reduce external stress 

Install heat tracing 
Line relocation 
Rehabilitation 
Coating repair 
Increase cover depth 

Operating temperature reduction 
Reduce moisture 
Biocide/inhibiting injection 
Install thermal protection 



X 

. .. X 
X X 



X X 
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X X 

X X 

X X 



X 

X X 
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Table 4 Acceptable Threat Prevention and Repair Methods (Cont'd) 
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Corrosion 
Third-Party Damage Related 



Equipment 



Prevention, Detection, 
and Repair Methods 



Gask/ Strip/ Cont/ Seal/ 
TPD(iF) PDP Vand Ext int Oring BP Rel Pack 



Incorrect 
Operation 

10 



Weather 
Related 



Manufacture 



Construction 



Environ- 
O-Force ment 



HR/F 



Pipe 
Seam 



Fab 
Pipe Gweld Weld Coup WB/B 



EM 



SCC 



Repairs 

Pressure reduction 
Replacement 
ECA, recoat 
Grind repair/ECA 
Direct deposition weld 

Type B, pressurized sleeve 
Type A, reinforcing sleeve 
Composite sleeve 
Epoxy filled sleeve 
Mechanical leak clamp 



X X 
X X 
X X 



X X 

X X 

X 
X X 

X 



GENERAL NOTE: The abbreviations found in Table 4 relate to the 21 threats discussed in para. 5. Explanations of the abbre- 
viations are as follows: 

Cont/Rel = Control/Relief Equipment Malfunction 

Coup = Coupling Failure 

CW = Cold Weather 

EM = Earth Movement 

Ext = External Corrosion 

Fab Weld = Defective Fabrication Weld 

Gask/Oring = Gasket or ORtng 

Gweld = Defective Pipe Girth Weld 

HR/F = Heavy Rains or Floods 

Int = Internal Corrosion 

10 ~ Incorrect Operations Company Procedure 

L - Lightning 

PDP = Previously Damaged Pipe (delayed failure mode) 

Pipe = Defective Pipe 

Pipe Seam - Defective Pipe Seam 

SCC = Stress Corrosion Cracking 

Seal/Pack = Seal/Pump Packing Failure 

Strip/BP - Stripped Thread/Broken Pipe 

TPD(!F) = Damage Inflicted by First, Second, or Third Parties 

Vand = Vandalism 

WB/B = Wrinkle Bend or Buckle 
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Fig. 4 Timing for Scheduled Responses: Time-Dependent Threats, Prescriptive 

Integrity Management Plan 



schedule established by Fig. 4. Any defect found to 
require repair or removal shall be promptly remediated 
by repair or removal unless the operating pressure is 
lowered to mitigate the need to repair or remove the 
defect 

Monitored indications are the least severe and will 
not require examination and evaluation until the next 
scheduled integrity assessment interval stipulated by 
the integrity management plan, provided that they are 
not expected to grow to critical dimensions prior to the 
next scheduled assessment. 

7.2.2 Crack Detection Tools for Stress Corrosion Crack- 
ing. All indications of stress corrosion cracks require 
immediate response. The operator shall examine and 
evaluate these indications within a period not to exceed 
5 days following determination of the condition. After 
examination and evaluation/ any defect found to require 
repair or removal shall be promptly remediated by 
repair, removal, or lowering the operating pressure. 

7.2.3 Afletal Loss and Caliper Tools for Third-Party 
Damage and Mechanical Damage. Indications requiring 
immediate response are those that might be expected 
to cause immediate or near-term leaks or ruptures based 
on their known or perceived effects on the strength of 
the pipeline. These could include dents with gouges. 
The operator shall examine these indications within a 
period not to exceed 5 days following determination of 
the condition. 



Indications requiring a scheduled response would 
include any indication on a pipeline operating at or 
above 30% of specified minimum yield strength (SMYS) 
of a plain dent that exceeds 6% of the nominal pipe 
diameter, mechanical damage with or without concur- 
rent visible indentation of the pipe, dents with cracks, 
dents that affect ductile girth or seam welds if the depth 
is in excess of 2% of the nominal pipe diameter, and 
dents of any depth that affect nonductile welds. (For 
additional information, see ASME B31.8, para. 851.4.) 
The operator shall expeditiously examine these indica- 
tions within a period not to exceed 1 year following 
determination of the condition. After examination and 
evaluation, any defect found to require repair or removal 
shall be promptly remediated by repair or removal, 
unless the operating pressure is lowered to mitigate the 
need to repair or remove the defect. 

7.2.4 Limitations to Response Times for Prescriptive- 
Based Program. When time-dependent anomalies such 
as internal corrosion, external corrosion, or stress corro- 
sion cracking are being evaluated, an analysis utilizing 
appropriate assumptions about growth rates shall be 
used to assure that the defect will not attain critical 
dimensions prior to the scheduled repair or next inspec- 
tion. GRI-00/0230 (see para. 14) contains additional 
guidance for these analyses. 

When determining repair intervals, the operator 
should consider that certain threats to specific pipeline 
operating conditions may require a reduced examination 
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and evaluation interval. This may include third-party 
damage or construction threats in pipelines subject to 
pressure cycling or external loading that may promote 
increased defect growth rates. For prescriptive-based 
programs, the inspection intervals are conservative for 
potential defects that could lead to a rupture; however, 
this does not alleviate operators of the responsibility to 
evaluate the specific conditions and changes in 
operating conditions to insure the pipeline segment does 
not warrant special consideration (see GRI-01/0085). 

If the analysis shows that the time to failure is too 
short in relation to the time scheduled for the repair, 
the operator shall apply temporary measures, such as 
pressure reduction, until a permanent repair is com- 
pleted. In considering projected repair intervals and 
methods, the operator should consider potential 
delaying factors, such as access, environmental permit 
issues, and gas supply requirements. 

7.2.5 Extending Response Times for Performance- 
Based Program. An engineering critical assessment 
(ECA) of some defects may be performed to extend the 
repair or reinspection interval for a performance-based 
program. ECA is a rigorous evaluation of the data that 
reassesses the criticality of the anomaly and adjusts the 
projected growth rates based on site-specific parameters. 

The operator's integrity management program shall 
include documentation that describes grouping of spe- 
cific defect types and the ECA methods used for such 
analyses. 

73 Responses to Pressure Testing 

Any defect that fails a pressure test shall be promptly 
remediated by repair or removal. 

7.3.1 External and Internal Corrosion Threats. The 

interval between tests for the external and internal corro- 
sion threats shall be consistent with Table 3. 

7.3.2 Stress Corrosion Cracking Threat. The interval 
between pressure tests for stress corrosion cracking shall 
be as follows: 

(a) If no failures occurred due to SCC, the operator 
shall use one of the following options to address the 
long-term mitigation of SCC: 

(?) a documented hydrostatic retest program with 
a technically justifiable interval or 

(2) an engineering critical assessment to evaluate 
the risk and identify further mitigation methods 

(b) If a failure occurred due to SCC, the operator shall 
perform the following: 

(1) implement a documented hydrostatic retest 
program for the subject segment and 

(2) technically justify the retest interval in the writ- 
ten retest program 

7.3.3 Manufacturing and Related Defect Threats. A 

subsequent pressure test for the manufacturing threat 



is not required unless the MAOP of the pipeline has 
been raised or when the operating pressure has been 
raised above the historical operating pressure (highest 
pressure recorded in 5 years prior to the effective date 
of this supplement). 

7.4 Responses to Direct Assessment Inspections 

7.4.1 External Corrosion Direct Assessment (ECDA). (04) 

For the ECDA prescriptive program for pipelines 
operating at and above 30% SMYS, if the operator 
chooses to examine and evaluate all the indications 
found by inspection, and repairs all defects that could 
grow to failure in 10 years, then the reinspection interval 
shall be 10 years. If the operator elects to examine, evalu- 
ate, and repair a smaller set of indications, then the 
interval shall be 5 years, provided an analysis is per- 
formed to ensure all remaining defects will not grow to 
failure in 10 years. The interval between determination 
and examination shall be consistent with Fig. 4. 

For the ECDA prescriptive program for pipeline seg- 
ments operating below 30% SMYS / if the operator 
chooses to examine and evaluate all the indications 
found by inspections and repair all defects that could 
grow to failure in 20 years, the reinspection interval shall 
be 20 years. If the operator elects to examine, evaluate, 
and repair a smaller set of indications, then the interval 
shall be 10 years, provided an analysis is performed to 
ensure all remaining defects will not grow to failure in 20 
years (at an 80% confidence level). The interval between 
determination and examination shall be consistent with 
Fig. 4. 

7.4.2 Internal Corrosion Direct Assessment (SCDA). For 

the ICDA prescriptive program, examination and evalu- 
ation of all selected locations must be performed within 
1 year of selection. The interval between subsequent 
examinations shall be consistent with Fig. 4. 

Figure 4 contains three plots of the allowed time to 
respond to an indication, based on the predictive failure 
pressure Pf divided by the MAOP of the pipeline. The 
three plots correspond to 

(a) pipelines operating at or above 50% SMYS 

(b) pipelines operating at or above 30% SMYS but at 
less than 50% SMYS 

(c) pipelines operating at less than 30% SMYS 

The figure is applicable to the prescriptive-based pro- 
gram. The intervals may be extended for the perform- 
ance-based program as provided in para. 7.2.5. 

7.5 Repair Methods 

Table 4 provides acceptable repair methods for each 
of the 21 threats. 

Each operator's integrity management program shall 
include documented repair procedures. All repairs shall 
be made with materials and processes that are suitable 
for the pipeline operating conditions and meet ASME 
B31.8 requirements. 
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7.6 Prevention Strategy/Methods 

Prevention is an important proactive element of an 
integrity management program. Integrity management 
program prevention strategies should be based on data 
gathering, threat identification, and risk assessments 
conducted per the requirements of paras. 2, 3, 4 and 5. 
Prevention measures shown to be effective in the past 
should be continued in the integrity management pro- 
gram. Prevention strategies (including intervals) should 
also consider the classification of identified threats as 
time-dependent, stable, or time-independent in order to 
ensure that effective prevention methods are utilized. 

Operators who opt for prescriptive programs should 
use, at a minimum, the prevention methods indicated 
in Nonmandatory Appendix A under "Mitigation." 

For operators who choose performance-based pro- 
grams, both the preventive methods and time intervals 
employed for each threat/ segment should be deter- 
mined by analysis using system attributes, information 
about existing conditions, and industry-proven risk 
assessment methods. 

7.7 Prevention Options 

An operator's integrity management program shall 
include applicable activities to prevent and minimize 
the consequences of unintended releases. Prevention 
activities do not necessarily require justification through 
additional inspection data. Prevention actions can be 
identified during normal pipeline operation, risk assess- 
ment, implementation of the inspection plan, or during 
repair. 

The predominant prevention activities presented in 
para. 7 include information on the following: 

(a) preventing third-party damage 

(b) controlling corrosion 

(c) detecting unintended releases 

(d) minimizing the consequences of unintended 
releases 

(e) operating pressure reduction 

There are other prevention activities that the operator 
may consider. A tabulation of prevention activities and 
their relevance to the threats identified in para. 2 is 
presented in Table 4. 

8 INTEGRITY MANAGEMENT PLAN 

8.1 General 

The integrity management plan is developed after 
gathering the data (see para. 4) and completing the risk 
assessment (see para. 5) for each threat and for each 
pipeline segment or system. An appropriate integrity- 
assessment method shall be identified for each pipeline 
system or segment. Integrity assessment of each system 
can be accomplished through a pressure test, an in-line 
inspection using a variety of tools, direct assessment, or 
use of other proven technologies (see para. 6). In some 



cases, a combination of these methods may be appro- 
priate. The highest-risk segments shall be given priority 
for integrity assessment. 

Following the integrity assessment, mitigation activi- 
ties shall be undertaken. Mitigation consists of two parts. 
The first part is the repair of the pipeline. Repair activi- 
ties shall be made in accordance with ASME B31.8 
and/or other accepted industry repair techniques. 
Repair may include replacing defective piping with new 
pipe, installation of sleeves, coating repair, or other reha- 
bilitation. These activities shall be identified, prioritized, 
and scheduled (see para. 7). 

Once the repair activities are determined, the operator 
shall evaluate prevention techniques that prevent future 
deterioration of the pipeline. These techniques may 
include providing additional cathodic protection, 
injecting corrosion inhibitors and pipeline cleaning, or 
changing the operating conditions. Prevention plays a 
major role in reducing or eliminating the threats from 
third-party damage, external corrosion, internal corro- 
sion, stress corrosion cracking, cold weather-related fail- 
ures, earth movement failures, problems caused by 
heavy rains and floods, and failures caused by incorrect 
operations. 

All threats cannot be dealt with through inspection 
and repair; therefore, prevention for these threats is a 
key element in the plan. These activities may include, 
e.g., prevention of third-party damage and monitoring 
for outside force damage. 

A performance-based integrity management plan, 
containing the same structure as the prescriptive-based 
plan, requires more detailed analyses based upon more 
complete data or information about the line. Using a 
risk assessment model, a pipeline operator can exercise 
a variety of options for integrity assessments and pre- 
vention activities, as well as their timing. 

Prior integrity assessments and mitigation activities 
should only be included in the plan if they were as 
rigorous as those identified in this Standard. 

8.2 Updating the Plan 

Data collected during the inspection and mitigation 
activities shall be analyzed and integrated with pre- 
viously collected data. This is in addition to other types 
of integrity management-related data that is constantly 
being gathered through normal operations and mainte- 
nance activities. The addition of this new data is a contin- 
uous process that, over time, will improve the accuracy 
of future risk assessments via its integration (see para. 
4). This ongoing data integration and periodic risk 
assessment will result in continual revision to the integ- 
rity assessment and mitigation aspects of the plan. In 
addition, changes to the physical and operating aspects 
of the pipeline system or segment shall be properly 
managed (see para. II). 

This ongoing process will most likely result in a series 
of additional integrity assessments or review of previous 
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integrity assessments. A series of additional mitigation 
activities or follow-up to previous mitigation activities 
may also be required. The plan shall be updated periodi- 
cally as additional information is acquired and incorpo- 
rated . 

It is recognized that certain integrity assessment activ- 
ities may be one-time events and focused on elimination 
of certain threats, such, as manufacturing, construction, 
and equipment threats. For other threats, such as time- 
dependent threats, periodic inspection will be required. 
The plan shall remain flexible and incorporate any new 
information. 

83 Plan Framework 

The integrity management plan shall contain detailed 
information regarding each of the following elements 
for each threat analyzed and each pipeline segment or 
system. 

8.3.1 Gathering, Reviewing, and integrating Data. The 

first step in the integrity management process is to col- 
lect, integrate, organize, and review all pertinent and 
available data for each threat and pipeline segment. This 
process step is repeated after integrity assessment and 
mitigation activities have been implemented, and as 
new operation and maintenance information about the 
pipeline system or segment is gathered. This information 
review shall be contained in the plan or in a database 
that is part of the plan. All data will be used to support 
future risk assessments and integrity evaluations. Data 
gathering is covered in para. 4. 

83.2 Assess Risk. Risk assessment should be per- 
formed periodically to include new information, con- 
sider changes made to the pipeline system or segment, 
incorporate any external changes, and consider new sci- 
entific techniques that have been developed and com- 
mercialized since the last assessment. It is recommended 
that this be performed annually but shall be performed 
after substantial changes to the system are made and 
before the end of the current interval. The results of this 
assessment are to be reflected in the mitigation and 
integrity assessment activities. Changes to the accept- 
ance criteria will also necessitate reassessment. The 
integrity management plan shall contain specifics about 
how risks are assessed and the frequency of reassess- 
ment. The specifics for assessing risk are covered in 
para. 5. 

83.3 Integrity Assessment. Based on the assessment 
of risk, the appropriate integrity assessments shall be 
implemented. Integrity assessments shall be conducted 
using in-line inspection tools, pressure testing, and /or 
direct assessment. For certain threats, use of these tools 
may be inappropriate. Implementation of prevention 
activities or more frequent maintenance activities may 
provide a more effective solution. Integrity assessment 
method selection is based on the threats for which the 



inspection is being performed. More than one assess- 
ment method or more than one tool may be required to 
address all the threats. After each integrity assessment, 
this portion of the plan shall be modified to reflect all 
new information obtained and to provide for future 
integrity assessments at the required intervals. The plan 
shall identify required integrity assessment actions and 
at what established intervals the actions will take place. 
All integrity assessments shall be prioritized and 
scheduled. 

Table 3 provides the integrity assessment schedules for 
time-dependent threats for prescriptive plans. A current 
prioritization listing and schedule shall be contained 
in this section of the integrity management plan. The 
specifics for selecting integrity assessment methods and 
performing the inspections are covered in para. 6. A 
performance-based integrity management plan can pro- 
vide alternative integrity assessment, repair, and pre- 
vention methods with different implementation times 
than those required under the prescriptive program. 
These decisions shall be fully documented. 

83.4 Responses to Integrity Assessment, Mitigation 
(Repair and Prevention), and Intervals. The plan shall 
specify how and when the operator will respond to 
integrity assessments. The responses shall be immediate, 
scheduled, or monitored. The mitigation element of the 
plan consists of two parts. The first part is the repair 
of the pipeline. Based on the results of the integrity 
assessments and the threat being addressed, appropriate 
repair activities shall be determined and conducted. 
These repairs shall be performed in accordance with 
accepted standards and operating practices. The second 
part of mitigation is prevention. Prevention can stop or 
slow down future deterioration of the pipeline. Preven- 
tion is also an appropriate activity for time-independent 
threats. All mitigation activities shall be prioritized and 
scheduled. The prioritization and schedule shall be mod- 
ified as new information is obtained and shall be a real- 
time aspect of the plan (see para. 7) 

Tables 5, 6, and 7 provide an example of an integrity 
management plan in a spreadsheet format for a hypo- 
thetical pipeline segment (line 1, segment 3). This 
spreadsheet shows the segment data, the integrity 
assessment plan devised based on the risk assessment, 
and the mitigation plan that would be implemented, 
including the reassessment interval. 

9 PERFORMANCE PLAN 

9.1 Introduction 

This paragraph provides the performance plan 
requirements that apply to both prescriptive- and per- 
formance-based integrity management programs. Plan 
evaluations shall be performed at least annually to pro- 
vide a continuing measure of integrity management pro- 
gram effectiveness over time. Such evaluations should 
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Table 5 Example of Integrity Management Plan for Hypothetical Pipeline 
Segment (Segment Data: Line 1, Segment 3) 



Segment Data 


Type 


Example 


Pipe attributes 


Pipe grade 


API 5L-X42 




Diameter 


24 in. 




Walt thickness 


0.250 in. 




Manufacturer 


A. 0. Smith 




Manufacturer process 


Low frequency 




Manufacturing date 


1965 




Seam type 


Electric resistance weld 


Design/construction 


Operating pressure (high/low) 


630/550 psig 




Operating stress 


72% SMYS 




Coating type 


Coal tar 




Coating condition 


Fair 




Pipe install date 


1966 




Joining method 


Submerged arc weld 




Soil type 


Clay 




Soil stability 


Good 




Hydrostatic test 


None 


Operational 


Compressor discharge temperature 


120°F 




Pipe wall temperature 


65°F 




Gas quality 


Good 




Flow rate 


50 MMSCFD 




Repair methods 


Replacement 




Leak/rupture history 


None 




Pressure cycling 


Low 




CP effectiveness 


Fair 




SCC indications 


Minor cracking 



consider both threat-specific and aggregate improve- 
ments. Threat-specific evaluations may apply to a partic- 
ular area of concern, while overall measures apply to 
all pipelines under the integrity management program. 
Program evaluation will help an operator answer the 
following questions: 

(a) Were all integrity management program objectives 
accomplished? 

(b) Were pipeline integrity and safety effectively 
improved through the integrity management program? 

(04) 9.2 Performance Measures Characteristics 

Performance measures focus attention on the integrity 
management program results that demonstrate 
improved safety has been attained. The measures pro- 
vide an indication of effectiveness, but are not absolute. 
Performance measure evaluation and trending can also 
lead to recognition of unexpected results that may 
include the recognition of threats not previously identi- 
fied. All performance measures shall be simple, measur- 
able, attainable, relevant, and permit timely evaluations. 
Proper selection and evaluation of performance mea- 
sures is an essential activity in determining integrity 
management program effectiveness. 

Performance measures should be selected carefully to 
assure that they are reasonable program effectiveness 



indicators. Change shall be monitored so the measures 
will remain effective over time as the plan matures. The 
time required to obtain sufficient data for analysis shall 
also be considered when selecting performance mea- 
sures. Methods shall be implemented to permit both 
short and long-term performance measure evaluations. 
Integrity management program performance measures 
can generally be categorized into groups. 

9.2.1 Process or Activity Measures. Process or activity 
measures can be used to evaluate prevention or mitiga- 
tion activities. These measures determine how well an 
operator is implementing various elements of the integ- 
rity management program. Measures relating to process 
or activity shall be selected carefully to permit perform- 
ance evaluation within a realistic time frame. 

9.2.2 Operational Measures. Operational measures 
include operational and maintenance trends that mea- 
sure how well the system is responding to the integrity 
management program. An example of such a measure 
might be the changes in corrosion rates due to the imple- 
mentation of a more effective CP program. The number 
of third-party pipeline hits after the implementation of 
prevention activities, such as improving the excavation 
notification process within the system, is another 
example. 
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Threat 



Table 6 Example of Integrity Management Plan for Hypothetical Pipeline Segment 
(Integrity Assessment Plan: Line 1, Segment 3) 

Interval, 
Years 



Criteria/Risk Assessment 



integrity Assessment 



Mitigation 



External corrosion 



Some external corrosion history, 
no in-line inspection 



Conduct hydrostatic test, 
perform in-line inspec- 
tion, or perform direct 
assessment 



Replace/repair locations 
where CFP below 
1.25 times the MAOP 



10 



Internal corrosion 

SCC 

Manufacturing 

Construction /fabrication 
Equipment 
Third-party damage 
incorrect operations 
Weather and outside force 



No history of IC issues, no in- 
line inspection 



Have found SCC of near critical 
dimension 

ERW pipe, joint factor < 1.0, 
no hydrostatic test 

No construction issues 

No equipment issues 

No third-party damage issues 

No operations issues 

No weather or outside force 
related issues 



Conduct hydrostatic test, 
perform in-line inspec- 
tion, or perform direct 
assessment 


Replace/repair locations 
where CFP below 
1.25 times the MAOP 


10 


Conduct hydrostati 


c test 


Replace pipe at test fail- 
ure locations 


3-5 


Conduct hydrostati 


c test 


Replace pipe at test fail- 
ure locations 


N/A 


None required 




N/A 




N/A 


None required 




N/A 




N/A 


None required 




N/A 




N/A 


None required 




N/A 




N/A 


None required 




N/A 




N/A 



Table 7 Example of Integrity Management Plan 

for Hypothetical Pipeline Segment 

(Mitigation Plan: Line 1, Segment 3) 



Example 



Description 



Repair Any hydrostatic test failure will be repaired 

by replacement of the entire joint of pipe. 

Prevention Prevention activities will include further moni- 

toring for SCC at susceptible locations, 
review of the cathodic protection design 
and levels, and monitoring for selective 
seam corrosion when the pipeline is 
exposed. 

Interval for The interval for reinspection will be 3 years 

reinspection if there was a failure caused by SCC. The 

interval will be 5 years if the test was 
successful. 

Data Test failures for reasons other than external 

integration or internal corrosion, SCC, or seam defect 

must be considered when performing risk 
assessment for the associated threat. 

GENERAL NOTE: For this pipeline segment, hydrostatic testing will 
be conducted. Selection of this method is appropriate due to its 
ability to address the internal and external corrosion threats as well 
as the manufacturing threat and the SCC threat. The test pressure 
will be at 1.39 times the MAOP. 



9.2.3 Direct Integrity Measures. Direct integrity mea- 
sures include leaks, ruptures, injuries, and fatalities. In 
addition to the above categories, performance measures 
can also be categorized as leading measures or lagging 
measures. Lagging measures are reactive in that they 
provide an indication of past integrity management pro- 
gram performance. Leading measures are proactive; 
they provide an indication of how the plan may be 
expected to perform. Several examples of performance 
measures classified as described above are illustrated in 
Table 8. 

9.3 Performance Measurement Methodology 

An operator can evaluate a system's integrity manage- 
ment program performance within their own system 
and also by comparison with other systems on an 
industry-wide basis. 

9.4 Performance Measurement: intrasystem 

(a) Performance metrics shall be selected and applied 
on a periodic basis for the evaluation of both prescrip- 
tive- and performance-based integrity management pro- 
grams. Such metrics shall be suitable for evaluation of 
local and threat-specific conditions, and for evaluation 
of overall integrity management program performance. 

(b) For operators implementing prescriptive pro- 
grams, performance measurement shall include all of the 
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Table 8 Performance Measures 



Measurement Category 



Lagging Measures 



Leading Measures 



Process/activity measures 



Pipe damage found per location 
excavated 



Number of excavation 
notification requests, 
number of patrol 
detects 



Operational measures 



Number of significant ill corro- 
sion anomalies 



New rectifiers and ground 
beds installed, CP 
current demand 
change, reduced CIS 
fault detects 



Direct integrity measures 



Leaks per mile in an integrity 
management program 



Change in leaks per mile 



threat-specific metrics for each threat in Nonmandatory 
Appendix A (see Table 9). Additionally, the following 
overall program measurements shall be determined and 
documented: 

(1) number of miles of pipeline inspected versus 
program requirements 

(2) number of immediate repairs completed as a 
result of the integrity management inspection program 

(3) number of scheduled repairs completed as a 
result of the integrity management inspection program 

(4) number of leaks, failures, and incidents (classi- 
fied by cause) 

(c) For operators implementing performance-based 
programs, the threat-specific metrics shown in Nonman- 
datory Appendix A shall be considered, although others 
may be used that are more appropriate to the specific 
performance-based program. In addition to the four 
metrics above, the operator should choose three or four 
metrics that measure the effectiveness of the perform- 
ance-based program. Table 10 provides a suggested list; 
however, the operator may develop their own set of 
metrics. Since performance-based inspection intervals 
will be utilized in a performance-based integrity man- 
agement program, it is essential that sufficient metric 
data be collected to support those inspection intervals. 
Evaluation shall be performed on at least an annual 
basis. 

(d) In addition to performance metric data collected 
directly from segments covered by the integrity manage- 
ment program, internal benchmarking can be conducted 
that may compare a segment against another adjacent 
segment or those from a different area of the same pipe- 
line system. The information obtained may be used to 
evaluate the effectiveness of prevention activities, miti- 
gation techniques, or performance validation. Such com- 
parisons can provide a basis to substantiate metric 
analyses and identify areas for improvements in the 
integrity management program. 

(e) A third technique that will provide effective infor- 
mation is internal auditing. Operators shall conduct 



periodic audits to validate the effectiveness of their 
integrity management programs and ensure that they 
have been conducted in accordance with the written 
plan. An audit frequency shall be established, consider- 
ing the established performance metrics and their partic- 
ular time base in addition to changes or modifications 
made to the integrity management program as it evolves. 
Audits may be performed by internal staff, preferably 
by personnel not directly involved in the administration 
of the integrity management program, or other 
resources. A list of essential audit items is provided 
below as a starting point in developing a company audit 
program. 

(1) A written integrity management policy and pro- 
gram for all the elements in Fig. 2 shall be in place. 

(2) Written integrity management plan procedures 
and task descriptions are up to date and readily 
available. 

(3) Activities are performed in accordance with 
the plan, 

(4) A responsible individual has been assigned for 
each element. 

(5) Appropriate references are available to respon- 
sible individuals. 

(6) Individuals have received proper qualification, 
which has been documented. 

(7) The integrity management program meets the 
requirements of this document. 

(8) All required activities are documented. 

(9) All action items or nonconformances are closed 
in a timely manner. 

(10) The risk criteria used have been reviewed and 
documented. 

(11) Prevention, mitigation, and repair criteria have 
been established, met, and documented. 

(f) Data developed from program specific perform- 
ance metrics, results of internal benchmarking, and 
audits shall be used to provide an effective basis for 
evaluation of the integrity management program. 
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Table 9 Performance Metrics 



Threats 



Performance Metrics for Prescriptive Programs 



External corrosion 
internal corrosion 

Stress corrosion cracking 

Manufacturing 
Construction 

Equipment 
Third-party damage 
Incorrect operations 



Weather related and outside 
forces 



Number of hydrostatic test failures caused by external corrosion 
Number of repair actions taken due to in-line inspection results 
Number of repair actions taken due to direct assessment results 
Number of external corrosion leaks 

Number of hydrostatic test failures caused by internal corrosion 
Number of repair actions taken due to in-line inspection results 
Number of repair actions taken due to direct assessment results 
Number of internal corrosion leaks 

Number of in-service leaks or failures due to SCC 
Number of repair replacements due to SCC 
Number of hydrostatic test failures due to SCC 

Number of hydrostatic test failures caused by manufacturing defects 
Number of leaks due to manufacturing defects 

Number of leaks or failures due to construction defects 

Number of girth welds/couplings reinforced/removed 

Number of wrinkle bends removed 

Number of wrinkle bends inspected 

Number of fabrication welds repaired/removed 

Number of regulator valve failures 
Number of relief valve failures 
Number of gasket or O-ring failures 
Number of leaks due to equipment failures 

Number of leaks or failures caused by third-party damage 

Number of leaks or failures caused by previously damaged pipe 

Number of leaks or failures caused by vandalism 

Number of repairs implemented as a result of third-party damage prior to a leak or failure 

Number of leaks or failures caused by incorrect operations 
Number of audits/reviews conducted 
Number of findings per audit/review, classified by severity 
Number of changes to procedures due to audits/reviews 

Number of leaks that are weather related or due to outside force 

Number of repair, replacement, or relocation actions due to weather-related or outside-force threats 



9.5 Performance Measurement: Industry Based 

In addition to intrasystem comparisons, external com- 
parisons can provide a basis for performance measure- 
ment of the integrity management program. This can 
include comparisons with other pipeline operators, 
industry data sources, and jurisdictional data sources. 
Benchmarking with other gas pipeline operators can be 
useful; however, any performance measure or evalua- 
tion derived from such sources shall be carefully evalu- 
ated to ensure that all comparisons made are valid. 
Audits conducted by outside entities can also provide 
useful evaluation data. 

9.6 Performance Improvement 

The results of the performance measurements and 
audits shall be utilized to modify the integrity manage- 
ment program as part of a continuous improvement 



process. Internal and external audit results are perform- 
ance measures that should be used to evaluate effective- 
ness in addition to other measures stipulated in the 
integrity management program. Recommendations for 
changes and /or improvements to the integrity manage- 
ment program shall be based on analysis of the perform- 
ance measures and audits. The results, 
recommendations, and resultant changes made to the 
integrity management program shall be documented. 

10 COMMUNICATIONS PLAN 

10.1 General 

The operator shall develop and implement a commu- 
nications plan in order to keep appropriate company 
personnel, jurisdictional authorities, and the public 
informed about their integrity management efforts and 
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Table 10 Overall Performance Measures 



Miles inspected vs. integrity management program requirement 

Number of integrity management program changes requested by jurisdictional authorities 

Jurisdictional reportable incidents/safety-related conditions per unit of time 

Amount of integrity management program required activities completed 

Fraction of system included in the integrity management program 
Number of actions completed that impact safety 
Number of anomalies found requiring repair or mitigation 
Number of leaks repaired 

Number of hydrostatic test failures and test pressures 

Number of third-party damage events, near misses, damage detected 

Risk reduction achieved by integrity management program 

Number of unauthorized crossings 

Number of precursor events detected 

Number of right-of-way encroachments: 

Number of pipeline hits by third parties due to lack of notification as locate request through the 

one-call process 
Aerial/ground patrol incursion detections 
Number of excavation notifications received and their disposition 
Number and types of public communications issued 
Effectiveness of communications 

Public confidence in integrity management program activities 

Effectiveness of the feedback process 

Integrity management program costs 

Integrity improvement through use of new technology 

Unscheduled outages and impact on customers 



(04) 



the results of their integrity management activities. The 
information may be communicated as part of other 
required communications. 

Some of the information should be communicated 
routinely. Other information may be communicated 
upon request. Use of industry, jurisdictional, and com- 
pany websites may be an effective way to conduct these 
communication efforts. 

Communications should be conducted as often as nec- 
essary to ensure that appropriate individuals and 
authorities have current information about the opera- 
tor's system and their integrity management efforts. It 
is recommended that communications take place peri- 
odically and as often as necessary to communicate sig- 
nificant changes to the integrity management plan. 

10.2 External Communications 

The following items should be considered for commu- 
nication to the various interested parties, as outlined 
below: 

(a) Landowners, and Tenants Along the Rights-of-Way 

(1) company name, location, and contact infor- 
mation 

(2) general location information and where more 
specific location information or maps can be obtained 

(3) commodity transported 

(4) how to recognize, report, and respond to a leak 



(5) contact phone numbers, both routine and emer- 
gency 

(6) general information about the pipeline opera- 
tor's prevention, integrity measures, and emergency pre- 
paredness, and how to obtain a summary of the integrity 
management plan 

(7) damage prevention information, including 
excavation notification numbers, excavation notification 
center requirements, and who to contact if there is any 
damage 

(b) Public Officials Other Than Emergency Responders 

(1) periodic distribution to each municipality of 
maps and company contact information 

(2) summary of emergency preparedness and 
integrity management program 

(c) Local and Regional Emergency Responders 

(1) operator should maintain continuing liaison 
with all emergency responders, including local emer- 
gency planning commissions, regional and area plan- 
ning committees, jurisdictional emergency planning 
offices, etc. 

(2) company name and contact numbers, both rou- 
tine and emergency 

(3) local maps 

(4) facility description and commodity transported 

(5) how to recognize, report, and respond to a leak 
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(6) general information about the operator's pre- 
vention and integrity measures, and how to obtain a 
summary of the integrity management plan 

(7) station locations and descriptions 

(8) summary of operator's emergency capabilities 

(9) coordination of operator 's emergency prepared- 
ness with local officials 

(d) General Public 

(1) information regarding operator's efforts to sup- 
port excavation notification and other damage preven- 
tion initiatives 

(2) company name, contact, and emergency 
reporting information, including general business 
contact 

It is expected that some dialogue may be necessary 
between the operator and the public in order to convey 
the operator's confidence in the integrity of the pipeline, 
as well as to convey the operator's expectations of the 
public as to where they can help maintain integrity. 
Such opportunities should be welcomed in order to help 
protect assets, people, and the environment. 

10.3 Internal Communications 

Operator management and other appropriate opera- 
tor personnel must understand and support the integrity 
management program. This should be accomplished 
through the development and implementation of an 
internal communications aspect of the plan. Perform- 
ance measures reviewed on a periodic basis and 
resulting adjustments to the integrity management pro- 
gram should also be part of the internal communica- 
tions plan. 

11 MANAGEMENT OF CHANGE PLAN 

(a) Formal management of change procedures shall be 
developed in order to identify and consider the impact of 
changes to pipeline systems and their integrity These 
procedures should be flexible enough to accommodate 
both major and minor changes, and must be understood 
by the personnel that use them. Management of change 
shall address technical, physical, procedural, and organi- 
zational changes to the system., whether permanent or 
temporary. The process should incorporate planning for 
each, of these situations and consider the unique circum- 
stances of each. 

A management of change process includes the fol- 
lowing: 

(1) reason for change 

(2) authority for approving changes 

(3) analysis of implications 

(4) acquisition of required work permits 

(5) documentation 

(6) communication of change to affected parties 

(7) time limitations 

(8) qualification of staff 



(b) The operator shall recognize that system changes 
can require changes in the integrity management pro- 
gram and, conversely results from the program can 
cause system changes. The following are examples that 
are gas-pipeline specific, but are by no means all- 
inclusive. 

(1) If a change in land use would affect either the (04) 
consequence of an incident, such as increases in popula- 
tion near the pipeline, or a change in likelihood of an 
incident, such as subsidence due to underground min- 
ing, the change must be reflected in the integrity man- 
agement plan and the threats reevaluated accordingly. 

(2) If the results of an integrity management pro- 
gram inspection indicate the need for a change to the 
system, such as changes to the CP program or, other 
than temporary, reductions in operating pressure, these 
shall be communicated to operators and reflected in an 
updated integrity management program. 

(3) If an operator decides to increase pressure in 
the system from its historical operating pressure to, or 
closer to, the allowable MAOP, that change shall be 
reflected in the integrity plan and the threats shall be 
reevaluated accordingly. 

(4) If a line has been operating in a. steady-state 
mode and a new load on the line changes the mode of 
operation to a more cyclical load (e.g., daily changes in 
operating pressure), fatigue shall be considered in each 
of the threats where it applies as an additional stress 
factor. 

(c) Along with management, the review procedure 
should require involvement of staff that can assess safety 
impact and, if necessary, suggest controls or modifica- 
tions. The operator shall have the flexibility to maintain 
continuity of operation within established safe 
operating limits. 

(d) Management of change ensures that the integrity 
management process remains viable and effective as 
changes to the system occur and /or new, revised, or 
corrected data becomes available. Any change to equip- 
ment or procedures has the potential to affect pipeline 
integrity. Most changes, however small, will have a con- 
sequent effect on another aspect of the system. For exam- 
ple, many equipment changes will require a 
corresponding technical or procedural change. All 
changes shall be identified and reviewed before imple- 
mentation. Management of change procedures provides 
a means of maintaining order during periods of change 
in the system and helps to preserve confidence in the 
integrity of the pipeline. 

(e) In order to ensure the integrity of a system, a 
documented record of changes should be developed and 
maintained. This information will provide a better 
understanding of the system and possible threats to 
its integrity. It should include the process and design 
information both before and after the changes were put 
into place. 
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(f) Communication of the changes carried out in the 
pipeline system to any affected parties is imperative 
to the safety of the system. As provided in para. 10, 
communications regarding the integrity of the pipeline 
should be conducted periodically. Any changes to the 
system should be included in the information provided 
in communication from the pipeline operator to affected 
parties. 

(g) System changes, particularly in equipment, may 
require qualification of personnel for the correct opera- 
tion of the new equipment. In addition, refresher train- 
ing should be provided to ensure that facility personnel 
understand and adhere to the facility's current operating 
procedures. 

(h) The application of new technologies in the integ- 
rity management program and the results of such appli- 
cations should be documented and communicated to 
appropriate staff and stakeholders. 

12 QUALITY CONTROL PLAN 

This paragraph describes the quality control activities 
that shall be part of an acceptable integrity management 
program. 

12.1 General 

Quality control as defined for this Standard is the "doc- 
umented proof that the operator meets all the require- 
ments of their integrity management program/' 

Pipeline operators that have a quality control program 
that meets or exceeds the requirements in this paragraph 
can incorporate the integrity management program 
activities within their existing plan. For those operators 
that do not have a quality program, this paragraph out- 
lines the basic requirements of such a program. 

12.2 Quality Management Control 

(a) Requirements of a quality control program include 
documentation, implementation, and maintenance. The 
following six activities are usually required: 

(1) identify the processes that will be included in 
the quality program 

(2) determine the sequence and interaction of these 
processes 

(3) determine the criteria and methods needed to 
ensure that both the operation and control of these pro- 
cesses are effective 

(4) provide the resources and information neces- 
sary to support the operation and monitoring of these 
processes 

(5) monitor, measure, and analyze these processes 

(6) implement actions necessary to achieve planned 
results and continued improvement of these processes 

(b) Specifically, activities that should be included in 
the quality control program are as follows: 



(1) determine the documentation required and 
include it in the quality program. These documents shall 
be controlled and maintained at appropriate locations 
for the duration of the program. Examples of docu- 
mented activities include risk assessments, the integrity 
management plan, integrity management reports, and 
data documents. 

(2) the responsibilities and authorities under this 
program shall be clearly and formally defined. 

(3) results of the integrity management program 
and the quality control program shall be reviewed at 
predetermined intervals, making recommendations for 
improvement. 

(4) the personnel involved in the integrity manage- (04) 
ment program shall be competent, aware of the program 

and all of its activities, and be qualified to execute the 
activities within the program. Documentation of such 
competence, awareness, and qualification, and the pro- 
cesses for their achievement, shall be part of the quality 
control plan. 

(5) the operator shall determine how to monitor 
the integrity management program to show that it is 
being implemented according to plan and document 
these steps. These control points, criteria, and /or per- 
formance metrics shall be defined. 

(6) periodic internal audits of the integrity manage- 
ment program and its quality plan are recommended. 
An independent third-party review of the entire pro- 
gram may also be useful. 

(7) corrective actions to improve the integrity man- 
agement program or quality plan shall be documented 
and the effectiveness of their implementation moni- 
tored. 

(c) When an operator chooses to use outside resources 
to conduct any process (for example, pigging) that affects 
the quality of the integrity management program, the 
operator shall ensure control of such processes and docu- 
ment them within the quality program. 



13 TERMS, DEFINITIONS, AND ACRONYMS 

See Fig. 5 for the hierarchy of terminology for integrity 
assessment. 

bell hole: excavation that minimizes surface disturbance 
yet provides sufficient room for examination or repair 
of buried facilities. 

cathodic protection (CP): technique by which under- 
ground metallic pipe is protected against deterioration 
(rusting and pitting). 

close interval survey (CIS): inspection technique that 
includes a series of aboveground pipe-to-soil potential 
measurements taken at predetermined increments of 
several feet (i.e., 2,100 ft) along the pipeline and used to 
provide information on the effectiveness of the cathodic 
protection system. 
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Fig. 5 Hierarchy of Terminology for Integrity Assessment 



composite repair sleeve: permanent repair method using 
composite sleeve material, which is applied with an 
adhesive. 

consequence: impact that a pipeline failure could have on 
the public, employees, property, and the environment. 

defect: imperfection of a type and magnitude exceeding 
acceptable criteria. 

direct current voltage gradient (DCVG): inspection tech- 
nique that includes aboveground electrical measure- 
ments taken at predetermined increments along the 
pipeline and is used to provide information on the effec- 
tiveness of the coating system. 

double submerged-arc welded pipe (DSAW pipe): pipe that 
has a straight longitudinal or helical seam containing 
filler metal deposited on both sides of the joint by the 
submerged-arc welded process. 

electric resistance welded pipe (ERW pipe): pipe that has a 
straight longitudinal seam produced without the addi- 
tion of filler metal by the application of pressure and heat 
obtained from electrical resistance. ERW pipe forming is 
distinct from flash welded pipe and furnace butt- welded 
pipe as a result of being produced in a continuous form- 
ing process from coils of flat plate. 



evaluation: analysis and determination of the facility's 
fitness for service under the current operating condi- 
tions. 

examination: direct physical inspection of the pipelines 
by a person and may also include the use of nondestruc- 
tive examination techniques (NDE). 

failure: general term used to imply that a part in service 
has become completely inoperable; is still operable but 
is incapable of satisfactorily performing its intended 
function; or has deteriorated seriously, to the point that 
is has become unreliable or unsafe for continued use. 

fracture toughness: resistance of a material to failure from 
the extension of a crack. 

gas: as used in this Standard, any gas or mixture of gases 
suitable for domestic or industrial fuel and transmitted 
or distributed to the user through a piping system. The 
common types are natural gas, manufactured gas, and 
liquefied petroleum gas distributed as a vapor, with or 
without the admixture of air. 

geographic information system (GIS): system of computer 
software, hardware, data, and personnel to help manipu- 
late, analyze, and present information that is tied to a 
geographic location. 
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global positioning system (GPS): system used to identify 
the latitude and longitude of locations using GPS satel- 
lites. 

hydrogen-induced cracking (HIC): form of hydrogen- 
induced damage consisting of cracking of the metal. 

hydrogen-induced damage; form of degradation of metals 
caused by exposure to environments (liquid or gas) that 
cause absorption of hydrogen into the material. Exam- 
ples of hydrogen-induced damage are formation of 
internal cracks, blisters, or voids in steels; embrittlement 
(i.e., loss of ductility); and high-temperature hydrogen 
attack (i.e., surface decarbonization and chemical reac- 
tion with hydrogen). 

incident: unintentional release of gas due to the failure 
of a pipeline. 

indication: finding of a nondestructive testing technique. 
It may or may not be a defect. 

in-line inspection (ILI): pipeline inspection technique that 
uses devices known in the industry as smart pigs. These 
devices run inside the pipe and provide indications of 
metal loss, deformation, and other defects. 

inspection: use of a nondestructive testing technique. 

integrity assessment: process that includes inspection of 
pipeline facilities, evaluating the indications resulting 
from the inspections, examining the pipe using a variety 
of techniques, evaluating the results of the examinations, 
characterizing the evaluation by defect type and severity, 
and determining the resulting integrity of the pipeline 
through analysis. 

leak: unintentional escape of gas from the pipeline. The 
source of the leak may be holes, cracks (include propa- 
gating and nonpropagating, longitudinal, and circum- 
ferential), separation or pullout, and loose connections. 

location class: onshore area that extends 220 yards on 
either side of the centerline of any continuous 1-mile 
length of pipeline. Class location units are categorized 
as Class 1 through 4, Class 1 locations are more rural 
and Class 4 locations are more urban. 

magnetic flux leakage (MFL): type of in-line inspection 
technique that induces a magnetic field in a pipe wall 
between two poles of a magnet. Sensors record changes 
in the magnetic flux (flow) that can be used to evaluate 
metal loss. 

management of change: process that systematically recog- 
nizes and communicates to the necessary parties 
changes of a technical, physical, procedural, or organiza- 
tional nature that can impact system integrity. 

maximum allowable operating pressure (MAOP): maximum 
pressure at which a gas system may be operated in 
accordance with the provisions of the ASME B31 .8 Code. 

mechanical damage: type of metal damage in a pipe or 
pipe coating caused by the application of an external 



force. Mechanical damage can include denting, coating 
removal, metal removal, metal movement, cold working 
of the underlying metal, and residual stresses, any one 
of which can be detrimental. 

microbiologically influenced corrosion (MIC): corrosion or 
deterioration of metals resulting from the metabolic 
activity of microorganisms. Such corrosion may be initi- 
ated or accelerated by microbial activity. 

mitigation: limitation or reduction of the probability of 
occurrence or expected consequence for a particular 
event. 

nondestructive examination (NDE): inspection technique 
that does not damage the item being examined. This 
technique includes visual, radiography, ultrasonic, elec- 
tromagnetic, and dye penetrant methods. 

operator: entity that operates and maintains the pipeline 
facilities and has fiduciary responsibility for such pipe- 
line facilities. 

performance-based integrity management program: integrity 
management process that utilizes risk management prin- 
ciples and risk assessments to determine prevention, 
detection, and mitigation actions and their timing. 

pig: device run inside a pipeline to clean or inspect the 
pipeline, or to batch fluids. 

piggability: ability of a pipeline or segment to be 
inspected by an ILI device. 

pipe grade: portion of the material specification for pipe, 
which includes specified minimum yield strength. 

pipeline: all parts of physical facilities through which gas 
moves in transportation, including: pipe, valves, fittings, 
flanges (including bolting and gaskets), regulators, pres- 
sure vessels, pulsation dampeners, relief valves, and 
other appurtenances attached to pipe; compressor units; 
metering stations; regulator stations; and fabricated 
assemblies. Included within, this definition are gas trans- 
mission and gathering lines, transporting gas from pro- 
duction facilities to onshore locations, and gas storage 
equipment of the closed-pipe type, which is fabricated 
or forged from pipe or fabricated from pipe and fittings. 

prescriptive integrity management program: integrity man- 
agement process that follows preset conditions that 
result in fixed inspection and mitigation activities and 
timelines. 

pressure test: measure of the strength of a piece of equip- 
ment (pipe) in which the item is filled with a fluid, 
sealed, and subjected to pressure. It is used to validate 
integrity and detect construction defects and defective 
materials. 

probability: likelihood of an incident occurring. 

rich gas: gas that contains significant amounts of hydro- 
carbons or components that are heavier than methane 
and ethane. Rich gases decompress in a different fashion 
than pure methane or ethane. 
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right-of-xvay (ROW): strip of land on which pipelines, 
railroads, power lines, and other similar facilities are 
constructed. It secures the right to pass through property 
owned by others. ROW agreements generally allow the 
right of ingress and egress for the operation and mainte- 
nance of the facility, and the installation of the facility. 
The width of the ROW can vary and is usually deter- 
mined based on negotiation with the affected landowner 
or by legal action. 

risk: measure of potential loss in terms of both the inci- 
dent probability (likelihood) of occurrence and the mag- 
nitude of the consequences. 

risk assessment: systematic process in which potential 
hazards from facility operation are identified, and the 
likelihood and consequences of potential adverse events 
are estimated. Risk assessments can have varying scopes, 
and be performed at varying level of detail depending 
on the operator's objectives (see para. 5). 

risk management: overall program consisting of identi- 
fying potential threats to an area or equipment; assessing 
the risk associated with those threats in terms of incident 
likelihood and consequences; mitigating risk by reduc- 
ing the likelihood, the consequences, or both; and mea- 
suring the risk reduction results achieved. 

root cause analysis: family of processes implemented to 
determine the primary cause of an event. These pro- 
cesses all seek to examine a cause-and-effect relationship 
through the organization and analysis of data. Such pro- 
cesses are often used in failure analyses. 

rupture: complete failure of any portion of the pipeline. 

SCAD A system: supervisory control and data acquisition 
system. 

segment: length of pipeline or part of the system that has 
unique characteristics in a specific geographic location. 

smart pig: industry term for a type of ILI device. 

specified minimum yield strength (SMYS): minimum yield 
strength of the steel in pipe as required by the pipe 
product specifications, lb/in." 

stress concentrator: discontinuity in a structure or change 
in contour that causes a local increase in stress. 

stress corrosion cracking (SCC): form of environmental 
attack of the metal involving an interaction of a local 
corrosive environment and tensile stresses in the metal, 
resulting in formation and growth of cracks. 

subject matter experts: individuals that have expertise in 
a specific area of operation or engineering. 

system: either the operator's entire pipeline infrastruc- 
ture or large portions of that infrastructure that have 
definable starting and stopping points, 

third-party damage: damage to a gas pipeline facility by 
an outside party other than those performing work for 
the operator. For the purposes of this Standard, this also 



includes damage caused by the operator 's personnel or 
the operator's contractors. 

transmission system: one or more segments of pipeline, 
usually interconnected to form a network, that trans- 
ports gas from a gathering system, the outlet of a gas 
processing plant, or a storage field to a high- or low- 
pressure distribution system, a large- volume customer, 
or another storage field. 

transportation of gas: gathering, transmission, or distribu- 
tion of gas by pipeline or the storage of gas. 

ultrasonic: high-frequency sound. Ultrasonic examina- 
tion is used to determine wall thickness and to detect 
the presence of defects. 

wrinkle, bend: pipe bend produced by field machine or 
controlled process that may result in abrupt contour 
discontinuities on the inner radius. 
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NONMANDATORY APPENDIX A 
THREAT PROCESS CHARTS AND PRESCRIPTIVE INTEGRITY 

MANAGEMENT PLANS 



This Appendix provides process charts and the essen- 
tials of a prescriptive integrity management plan for the 
nine categories of threats listed in the main body of this 
Standard. The required activities and intervals are not 
applicable for severe conditions that the operator may 
encounter. In those instances, more rigorous analysis 
and more frequent inspection may be necessary. 

Al EXTERNAL CORROSION THREAT 

Al.l Scope 

Paragraph Al provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, of external corrosion (see Fig. Al). 
External corrosion is defined in this context to include 
galvanic corrosion and microbiologically influenced cor- 
rosion (MIC). 

This paragraph outlines the integrity management 
process for external corrosion in general and also covers 
some specific issues. Pipeline incident analysis has iden- 
tified external corrosion among the causes of past inci- 
dents. 

A1.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected in support of 
performing risk assessment and for special considera- 
tions, such as identifying severe situations requiring 
more or additional activities. 

(a) year of installation 

(b) coating type 

(c) coating condition 

(d) years with adequate cathodic protection 

(e) years with questionable cathodic protection 

(f) years without cathodic protection 

(g) soil characteristics 

(h) pipe inspection reports (bell hole) 

(i) MIC detected (yes, no, or unknown) 

(j) leak history 

(k) wall thickness 

(I) diameter 

(in) operating stress level (% SMYS) 

(n) past hydrostatic test information 



For this threat, the data is used primarily for prioriti- 
zation of integrity assessment and /or mitigation activi- 
ties. Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 
assessment or, alternatively, the segment shall be priori- 
tized higher. 

A1.3 Criteria and Risk Assessment 

For new pipelines or pipeline segments, the operator 
may wish to use the original material selection, design 
conditions, and construction inspections, as well as the 
current operating history to establish the condition of 
the pipe. For this situation, the operator must determine 
that the construction inspections have an equal or 
greater rigor than that provided by the prescribed integ- 
rity assessment in this Standard. 

In no case shall the interval between construction and 
the first required reassessment of integrity exceed 10 
years for pipe operating above 60% SMYS, 13 years for 
pipe operating above 50% SMYS and at or below 60% 
SMYS, 15 years for pipe operating at or above 30% SMYS 
and at or below 50% SMYS, and 20 years for pipe 
operating below 30% SMYS. 

For all pipeline segments older than those stated 
above, integrity assessment shall be conducted using a 
methodology, within the specified response interval, as 
provided in para. A1.5. 

Previous integrity assessments can be considered as 
meeting these requirements, provided the inspections 
have equal or greater rigor than that provided by the 
prescribed inspections in this Standard. The interval 
between the previous integrity assessment and the next 
integrity assessment cannot exceed the interval stated 
in this Standard. 

A1.4 Integrity Assessment 

The operator has a choice of three integrity assessment 
methods: in-line inspection with a tool capable of 
detecting wall loss, such as an MFL tool; performing a 
pressure test; or conducting direct assessment. 

(a) In-Line Inspection. The operator shall consult para. 
6 of this Standard, which defines the capability of vari- 
ous ILI devices and provides criteria for running of the 
tool. The operator selects the appropriate tools and 
he/she or his/her representative performs the 
inspection. 
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Fig. Al Integrity Management Plan, External Corrosion Threat (Simplified Process: Prescriptive) 



(b) Pressure Test. The operator shall consult para. 6 of 
this Standard, which defines how to conduct tests for 
both post-construction and in-service pipelines. The 
operator selects the appropriate test and he/she or 
his/her representative performs the test. 

(c) Direct Assessment. The operator shall consult para. 
6 of this Standard, which defines the process, tools, and 
inspections. The operator selects the appropriate tools 
and he/she or his/her representative performs the 
inspections. 

A1.5 Responses and Mitigation 

Responses to integrity assessments are detailed below. 

(a) Jn-Line Inspection. The response is dependent on 
the severity of corrosion as determined by calculating 
critical failure pressure of indications (see ASME B31G 



or equivalent) and a reasonably anticipated or scientifi- 
cally proven rate of corrosion. Refer to para. 7 for 
responses to integrity assessment. 

(b) Direct Assessment. The response is dependent on 
the number of indications examined, evaluated, and 
repaired. Refer to para. 7 for responses to integrity 
assessment. 

(c) Pressure Testing. The interval is dependent on the 
test pressure. If the test pressure was at least 1.39 times 
MAOP, the interval shall be 10 years. If the test pressure 
was at least 1.25 times MAOP, the interval shall be 5 years 
(see para. 7). 

If the actual operating pressure is less than MAOP, 
the factors shown above can be applied to the actual 
operating pressure in lieu of MAOP for the purposes of 
insuring integrity at the reduced pressure only. 
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The operator shall select the appropriate repair meth- 
ods as outlined in para. 7. 

The operator shall select the appropriate prevention 
practices as outlined in para. 7. 

A1.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, when 
conducting an ILI with an MFL tool, dents may be 
detected on the top half of the pipe. This may have been 
caused by third-party damage. It is appropriate then to 
use this information when conducting risk assessment 
for the third-party damage threat. 

A1.7 Assessment Interval 

The operator is required to assess integrity periodi- 
cally. The interval for assessments is dependent on the 
responses taken as outlined in para. A1.5. 

These intervals are maximum intervals. The operator 
must incorporate new data into the assessment as data 
becomes available and that may require more frequent 
integrity assessments. For example, a leak on the seg- 
ment that may be caused by external corrosion should 
necessitate immediate reassessment. 

Changes to the segment may also require reassess- 
ment. Change management is addressed in this Standard 
in para. 11. 

A1.8 Performance Measures 

The following performance measures shall be docu- 
mented for the external corrosion threat, in order to 
establish the effectiveness of the program and for confir- 
mation of the integrity assessment interval: 

(a) number of hydrostatic test failures caused by 
external corrosion 

(b) number of repair actions taken due to in-line 
inspection results, immediate and scheduled 

(c) number of repair actions taken due to direct assess- 
ment results, immediate and scheduled 

(d) number of external corrosion leaks (for low r -stress 
pipelines it may be beneficial to compile leaks by leak 
classification) 



A2 INTERNAL CORROSION THREAT 

A2.1 Scope 

Paragraph A2 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, of internal corrosion. Internal cor- 
rosion is defined in this context to include chemical 
corrosion and internal microbiologically influenced cor- 
rosion (MIC; see Fig. A2). 

This paragraph outlines the integrity management 
process for internal corrosion in general and also covers 



some specific issues. Pipeline incident analysis has iden- 
tified internal corrosion among the causes of past inci- 
dents. 

A2.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected in support of 
performing risk assessment and for special considera- 
tions, such as identifying severe situations requiring 
more or additional activities. 

(a) year of installation 

(b) pipe inspection reports (bell hole) 

(c) leak history 

(d) wall thickness 

(e) diameter 

(f) past hydrostatic test information 

(g) gas, liquid, or solid analysis (particularly hydro- 
gen sulfide, carbon dioxide, oxygen, free water, and chlo- 
rides) 

(h) bacteria culture test results 

(i) corrosion detection devices (coupons, probes, etc.) 

(j) operating parameters (particularly pressure and 
flow velocity and especially periods where there is no 
flow) 

(k) operating stress level (% SMYS) 

For this threat, the data is used primarily for prioriti- 
zation of integrity assessment and/or mitigation activi- 
ties. Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 
assessment or, alternatively, the segment shall be priori- 
tized higher. 

A23 Criteria and Risk Assessment 

For new pipelines or pipeline segments, the operator 
may wish to use the original material selection, design 
conditions, and construction inspections, as well as the 
current operating history, to establish the condition of 
the pipe. For this situation, the operator must determine 
that the construction inspections have an equal or 
greater rigor than that provided by the prescribed integ- 
rity assessments in this Standard. In addition, the opera- 
tor shall determine that a corrosive environment does 
not exist. 

In no case may the interval between construction and 
the first required reassessment of integrity exceed 10 
years for pipe operating above 60% SMYS, 1.3 years for 
pipe operating above 50% SMYS and at or below 60% 
SMYS, and 15 years for pipe operating at or below 50% 
SMYS. 

For all pipeline segments older than those stated 
above, integrity assessment shall be conducted using a 
methodology within the specified response interval, as 
provided in para. A2.5. 

Previous integrity assessments can be considered as 
meeting these requirements, provided the inspections 
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Fig. A2 Integrity Management Plan, Internal Corrosion Threat (Simplified Process: Prescriptive) 



have equal or greater rigor than that provided by the 
prescribed inspections in this Standard. The interval 
between the previous integrity assessment and the next 
integrity assessment cannot exceed the interval stated 
in this Standard. 

A2.4 Integrity Assessment 

The operator has a choice of three integrity assessment 
methods: in-line inspection with a tool capable of 
detecting wall loss, such as an MFL tool; performing a 
pressure test; or conducting direct assessment. 

(a) In-line Inspection. For in-line inspection, the oper- 
ator must consult para. 6 of this Standard, which defines 
the capability of various ILI devices and provides criteria 
for running of the tool. The operator selects the appro- 
priate tools and he/she or his/her representative per- 
forms the inspection. 



(b) Pressure Test. The operator shall consult para. 6 of 
this Standard, which defines how to conduct tests for 
both post-construction and in-service pipelines. The 
operator selects the appropriate test and he/she or 
his/her representative performs the test. 

(c) Direct Assessment. The operator shall consult para. 
6 of this Standard, which defines the process, tools, and 
inspections. The operator selects the appropriate tools 
and he/she or his/her representative performs the 
inspections. 

A2.5 Responses and Mitigation 

Responses to integrity assessments are detailed below. 

(a) In-Line Inspection. The response is dependent on 
the severity of corrosion, as determined by calculating 
critical failure pressure of indications (see ASME B31G 
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or equivalent) and a reasonably anticipated or scientifi- 
cally proven rate of corrosion. Refer to para. 7 for 
responses to integrity assessments. 

(b) Direct Assessment. The response is dependent on 
the number of indications examined, evaluated, and 
repaired. Refer to para. 7 for responses to integrity 
assessment. 

(c) Pressure Testing. The interval is dependent on the 
hydrostatic test pressure. If the test pressure was at least 
1.39 times MA OP, the interval is 10 years. If the test 
pressure was at least 1.25 times MAOP, the interval is 
5 years (see para. 7). 

If the actual operating pressure is less than MAOP, 
the factors shown above can be applied to the actual 
operating pressure in lieu of MAOP for the purposes of 
insuring integrity at the reduced pressure only 

The operator shall select the appropriate repair meth- 
ods as outlined in para. 7. 

The operator shall select the appropriate prevention 
practices as outlined in para. 7. Data confirming that a 
corrosive environment exists should prompt the design 
of a mitigation plan of action and immediate implemen- 
tation should occur. Data suggesting that a corrosive 
environment may exist should prompt an immediate 
reevaluation. If the data shows that no corrosive condi- 
tion or environment exists, then the operator should 
identify the conditions that would prompt reevaluation. 

A2.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, when 
conducting an ILI with an MFL tool, dents may be called 
out on the top half of the pipe. This may have been 
caused by third-party damage. It is appropriate then to 
use this data when conducting integrity assessment for 
the third-party damage threat. 

A2.7 Assessment Interval 

The operator is required to assess integrity periodi- 
cally. The interval for assessment is dependent on the 
responses taken, as outlined in para. A2.5. 

These intervals are maximum intervals. The operator 
shall incorporate new data into the assessment as data 
becomes available, and that may require more frequent 
integrity assessments. For example, a leak on the seg- 
ment that may be caused by internal corrosion would 
necessitate immediate reassessment. 

Changes to the segment may also drive reassessment. 
This change management is addressed in para. 11. 

A2.8 Performance Metrics 

The following performance metrics shall be docu- 
mented for the internal corrosion threat, in order to 
establish the effectiveness of the program and for confir- 
mation of the integrity assessment interval: 



(a) number of hydrostatic test failures caused by 
internal corrosion 

(b) number of repair actions taken due to in-line 
inspection results, immediate and scheduled 

(c) number of repair actions taken due to direct assess- 
ment results, immediate and scheduled 

(d) number of internal corrosion leaks (for low stress 
pipelines, it may be beneficial to compile leaks by leak 
grade) 

A3 STRESS CORROSION CRACKING THREAT 

A3.1 Scope 

Paragraph A3 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for high pIT type stress corrosion 
cracking (SCC) of gas line pipe (see Fig. A3). Near- 
neutral type SCC similarly w r ould require an inspection 
and alternative mitigation plan. Integrity assessment 
and mitigation plans for both phenomena are discussed 
in published research literature. This paragraph does not 
address all possible means of inspecting for mitigation of 
SCC. As new tools and technologies are developed, they 
can be assessed and be available for use by the operator. 

A3.2 Gathering, Reviewing, and integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected for performing 
risk assessment and for special considerations, such as 
identifying severe situations requiring more or addi- 
tional activities. 

(a) age of pipe 

(b) operating stress level (% SMYS) 

(c) operating temperature 

(d) distance of the segment from a compressor station 

(e) coating type 

(f) past hyd rotes t information for reasons other than 
SCC investigation 

Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 
analysis or, alternatively, the segment shall be prioritized 
higher. 

A3.3 Criteria and Risk Assessment 

Each segment should be assessed for risk for the possi- 
ble threat of SCC if all of the following criteria are 
present: 

(a) operating stress > 60% SMYS 

(b) operating temperature > 100°F 

(c) distance from compressor station < 20 miles 

(d) age > 10 years 

(e) all corrosion coating systems other than fusion- 
bonded epoxy (FBE) 
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Fig. A3 Integrity Management Program, Stress Corrosion Cracking Threat 
(Simplified Process: Prescriptive) 
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In addition, each segment in which one or more ser- 
vice incidents or one or more hydrostatic test breaks or 
leaks has been caused by one of the two types of SCC 
shall be evaluated, unless the conditions that led to the 
SCC have been corrected. 

For this threat, the risk assessment consists of compar- 
ing the data elements to the criteria. If the conditions 
of the criteria are met or if the segment has a previous 
SCC history (i.e., bell hole inspection indicating SCC, 
hydrotest failures caused by SCC, in-service failures 
caused by SCC, or leaks caused by SCC), the pipe is 
considered to be at risk for the occurrence of SCC. Other- 
wise, if one of the conditions of the criteria is not met 
and if the segment does not have a history of SCC, no 
action is required. 

A3.4 Integrity Assessment 

If conditions for SCC are present (i.e., meet criteria), 
a written inspection, examination, and evaluation plan 
shall be prepared. The plan should give consideration to 
integrity assessment for other threats and prioritization 
among other segments that are at risk for SCC. 

If the pipeline experiences an in-service leak or rup- 
ture that is attributed to SCC, the particular segment 
shall be subjected to a hydrostatic test (as described 
below) within 12 months. A documented hydrostatic 
retest program shall be developed for this segment. Note 
that hydrostatic pressure testing is required. Use of other 
test mediums is not permitted. 

Acceptable inspection and mitigation activities for 
addressing pipe segments at risk for SCC are covered 
in paras. A3.4.1 and A3.4.2. 

A3 Al Bell Hole Examination and Evaluation Method 

(a) Appropriate safety precautions shall be imple- 
mented before any dig activity. 

(b) Pick an appropriate or most likely site. 

(c) Any areas of disbonded coating shall have the 
coating removed and the surface inspected for SCC 
using magnetic particle inspection (MPI) with a docu- 
mented inspection procedure. 

(d) Results 

(1) No SCC Indication 

(a) Recoat disbonded area using appropriate 
coating and method. 

(b) Evaluate interval schedule for additional bell 
hole inspections if necessary. 

(2) SCC Indication 

When SCC indications are detected, one of the follow- 
ing three mitigation methods shall be used: 

(a) evaluate repair or removal methods for SCC. 
Industry research such as PR-218-9307 addresses repair 
methods for SCC. 

(b) hydrostatically test the subject valve section. 
Refer to para. A3.4.2. 



(c) engineering critical assessment may be con- 
ducted to evaluate the risk and identify any further 
mitigation methods. [See para. A3.4.2(d)(3).] 

A3.4.2 Hydrostatic Testing for SCC. Hydrostatic test- 
ing conditions for SCC mitigation have been developed 
through industry research to optimize the removal of 
critical-sized flaws wmile minimizing growth of sub- 
critical-sized flaws. Recommended hydrostatic test cri- 
teria are as follows: 

(a) high-point test pressure equivalent to a minimum 
of 100% SMYS 

(b) target test pressure shall be maintained for a mini- 
mum period of 10 min 

(c) upon returning the pipeline to gas service, a flame 
ionization survey shall be performed (Alternatives may 
be considered for hydrostatic test failure events due to 
causes other than SCC.) 

(d) Results 

(1) No SCC Hydrostatic Test Leak or Rupture. If no 
leaks or ruptures due to SCC occurred, the operator shall 
use one of the following two options to address long- 
term mitigation of SCC: 

(a) implement a written hydrostatic retest pro- 
gram with a technically justifiable interval or 

(b) perform engineering critical assessment to 
evaluate the risk and identify further mitigation meth- 
ods [see para. A3.4.2(d)(3)] 

(2) SCC Hydrostatic Test Leak or Rupture. If a leak or 
rupture due to SCC occurred, the operator shall use 
one of the following three options to address long-term 
mitigation of SCC: 

(a) a written hydrostatic retest program shall be (04) 
implemented for the subject line segment 

(b) the retest interval shall be carefully consid- 
ered by the operator 

(c) the interval shall be technically justified in the 
written retest program 

(3) Engineering Critical Assessment. This is a written 
document that evaluates the risks of SCC and provides 
a technically defensible plan that demonstrates satisfac- 
tory pipeline safety performance. The document shall 
consider the defect growth mechanisms of the SCC 
process. 

A3.5 Other Data 

During the integrity assessment and mitigation activi- 
ties, the operator may discover other data that may be 
pertinent to other threats. This data should be used 
where appropriate for performing risk assessments for 
other threats. 

A3.6 Performance Measures 

The following performance measures shall be docu- 
mented for the SCC threat, in order to establish the 
effectiveness of the program and for confirmation of the 
inspection interval: 
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Fig. A4 Integrity Management Plan, Manufacturing Threat 
(Pipe Seam and Pipe; Simplified Process: Prescriptive) 



(a) number of in-service leaks/ failures due to SCC 

(b) number of repair or replacements due to SCC 

(c) number of hydrostatic test failures due to SCC 

A4 MANUFACTURING THREAT (PIPE SEAM AND 
PIPE) 

A4.1 Scope 

Paragraph A4 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for manufacturing concerns. Man- 
ufacturing is defined in this context as pipe seam and 
pipe (see Fig. A4). 

This paragraph outlines the integrity management 
process for manufacturing concerns in general and also 



covers some specific issues. Pipeline incident analysis 
has identified manufacturing among the causes of past 
incidents. 

A4.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected for performing 
risk assessment and for special considerations such as 
identifying severe situations requiring more or addi- 
tional activities. 

(a) pipe material 

(b) year of installation 

(c) manufacturing process (age of manufacture as 
alternative; see note below) 
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id) seam type 

(e) joint factor 

(f) operating pressure history 

Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 
assessment or, alternatively, the segment shall be priori- 
tized higher. 

NOTE: When pipe data is unknown, the operator may refer to 
History of Line Pipe Manufacturing in North America by J. R 
Kiefner and E. B. Clark, 1996, ASME. 

A4.3 Criteria and Risk Assessment 

For cast iron pipe, steel pipe greater than 50 years 
old, mechanically coupled pipelines, or pipelines joined 
by means of acetylene girth welds, where low tempera- 
tures are experienced or where the pipe is exposed to 
movement such as land movement or removal of sup- 
porting backfill, examination of the terrain is required. 
If land movement is observed or can reasonably be antic- 
ipated, a pipeline movement monitoring program- 
should be established and appropriate intervention 
activities undertaken. 

If the pipe has a joint factor of less than 1.0 (such as 
lap-welded pipe, hammer-welded pipe, and butt- 
welded pipe) or if the pipeline is comprised of low- 
frequency-welded ERW pipe or flash-welded pipe, a 
manufacturing threat is considered to exist. 

A4.4 Integrity Assessment 

For cast iron pipe, the assessment should include eval- 
uation as to whether or not the pipe is subject to land 
movement or subject to removal of support. 

For steel pipe seam concerns, when raising the MAOP 
of a pipeline or when raising the operating pressure 
above the historical operating pressure (highest pressure 
recorded in the past 5 years), pressure testing must be 
performed to address the seam issue. Pressure testing 
shall be in accordance with ASME B31.8; to at least 1.25 
times the MAOP. ASME B31.8 defines how to conduct 
tests for both post-construction and in-service pipelines. 

A4.5 Responses and Mitigation 

For cast iron pipe, mitigation options include replace- 
ment of pipe or stabilization of pipe. 

For steel pipe, any section that fails the pressure test 
must be replaced. 

The operator shall select the appropriate prevention 
practices. For this threat, the operator should develop 
pipe specifications to be used when ordering pipe that 
meets or exceeds the requirements of ASME B31.8. 

A4.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, certain 



seam types may be more susceptible to accelerated cor- 
rosion. It is appropriate to use this information when 
conducting risk assessments for external or internal cor- 
rosion. 

A4.7 Assessment Interval 

Periodic integrity assessment is not required. Changes 
to the segment may drive reassessment, such as uprating 
the pipeline's operating pressure, or changes in 
operating conditions, such as significant pressure 
cycling. Change management is addressed in para. 11. 

A4.8 Performance Measures 

The following performance measures shall be docu- 
mented for the manufacturing threat, in order to estab- 
lish the effectiveness of the program and for 
confirmation of the inspection interval: 

(a) number of hydrostatic test failures caused by man- 
ufacturing defects 

(b) number of leaks due to manufacturing defects 

A5 CONSTRUCTION THREAT (PIPE GIRTH WELD, 
FABRICATION WELD, WRINKLE BEND OR 
BUCKLE, STRIPPED THREADS/BROKEN PIPE/ 
COUPLING) 

A5.1 Scope 

Paragraph A5 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for construction concerns. Con- 
struction is defined in this context as pipe girth weld, 
fabrication weld, wrinkle bend or buckle, stripped 
threads, broken pipe, or coupling (see Fig. A5). 

This paragraph outlines the integrity management 
process for construction concerns in general, and also 
covers some specific issues. Pipeline incident analysis 
has identified construction among the causes of past 
incidents. 

A5.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected to support per- 
forming risk assessment and for special considerations, 
such as identifying severe situations requiring more or 
additional activities. 

(a) pipe material 

(b) wrinkle bend identification 

(c) coupling identification 

(d) post-construction coupling reinforcement 

(e) welding procedures 

(f) post-construction girth weld reinforcement 

(g) NOT information on welds 
(h) hydrostatic test information 

(i) pipe inspection reports (bell hole) 

(j) potential for outside forces (see para. A9) 
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Fig. A5 Integrity Management Plan, Construction Threat 
(Pipe Girth Weld, Fabrication Weld, Wrinkle Bend or Buckle, Stripped Threads/ Broken Pipe/Coupling; 

Simplified Process: Prescriptive) 



(k) soil properties and depth of cover for wrinkle 
bends 

(I) maximum temperature ranges for wrinkle bends 

(m) bend radii and degrees of angle change for wrin- 
kle bends 

(n) operating pressure history and expected opera- 
tion, including significant pressure cycling and fatigue 
mechanism 

Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 
assessment or, alternatively, the segment shall be priori- 
tized higher. 



A5.3 Criteria and Risk Assessment 

For girth welds, a review of the welding procedures 
and NDT information is required to ascertain that the 
welds are adequate. 

For fabrication welds, a review of the welding proce- 
dures and NDT information, as well as a review 7 of forces 
due to ground settlement or other outside loads, is 
required to ascertain that the welds are adequate. 

For wrinkle bends and buckles as well as couplings, 
reports of visual inspection should be reviewed to ascer- 
tain their continued integrity. Potential movement of 
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the pipeline may cause additional lateral and/ or axial 
stresses. Information relative to pipe movement should 
be reviewed, such as temperature range, bend radius, 
degree of bend, depth of cover, and soil properties. These 
are important factors in determining whether or not 
bends are being subjected to injurious stresses or strains. 
The existence of these construction-related threats 
alone does not pose an integrity issue. The presence of 
these threats in conjunction with the potential for out- 
side forces significantly increases the likelihood of an 
event. The data must be integrated and evaluated to 
determine where these construction characteristics coex- 
ist with external or outside force potential. 

A5.4 Integrity Assessment 

For construction threats, the inspection should be by 
data integration, examination, and evaluation for threats 
that are coincident with the potential for ground move- 
ment or outside forces that w T ill impact the pipe. 

A5.5 Responses and Mitigation 

The operator shall select the appropriate prevention 
practices. For this threat, the operator should develop 
excavation protocols to ensure the pipe is not moved and 
additional stresses introduced. In addition, the operator 
should conduct examinations and evaluations every 
time the pipe is exposed. Potential threats should be 
mitigated by proactive procedures that require inspec- 
tion, repair, replacement, or reinforcement when, the 
need to inspect the pipeline for other maintenance rea- 
sons occurs. 

A5.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, certain 
seam types may be more susceptible to accelerated cor- 
rosion. It is appropriate to use this information when 
conducting risk assessments for external or internal cor- 
rosion. 

A5.7 Assessment Interval 

Periodic assessment is not required. Changes to the 
segment or changes in land use may drive reassessment. 
Change management is addressed in para. 11. 

A5.8 Performance Measures 

The following performance measures shall be docu- 
mented for the construction threat, in order to establish 
the effectiveness of the program: 

(a) number of leaks or failures due to construction 
defects 

(b) number of girth welds/couplings reinforced/ 
removed 

(c) number of wrinkle bends removed 

(d) number of wrinkle bend inspections 

(e) number of fabrication welds repaired /removed 



A6 EQUIPMENT THREAT (GASKETS AND O-RINGS, 
CONTROL/RELIEF, SEAL/PUMP PACKING) 

A6.1 Scope 

Paragraph A6 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for pipeline equipment failure. 
Equipment is defined in this context as pipeline facilities 
other than pipe and pipe components. Meter/ regulator 
and compressor stations are typical equipment locations 
(see Fig. A6). 

This paragraph outlines the integrity management 
process for equipment in general and also covers some 
specific issues. Pipeline incident analysis has identified 
pressure control and relief equipment, gaskets and O- 
rings, and seal/pump packing among the causes of past 
incidents. 

A6.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a. risk assessment 
can be conducted. This data is collected in support of 
performing risk assessment and for special considera- 
tions, such as identifying severe situations requiring 
more or additional activities. 

(a) year of installation of failed equipment 

(b) regulator valve failure information 

(c) relief valve failure information 

(d) flange gasket failure information 

(e) regulator set point drift (outside of manufacturer's 
tolerances) 

(f) relief set point drift 

(g) O-ring failure information 
(h) seal /packing information 

Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 
assessment or, alternatively, the segment shall be priori- 
tized higher. 

A6.3 Criteria and Risk Assessment 

Certain relief and regulator valves are known to have 
their set points drift. These equipment types may require 
extra scrutiny 

Certain gasket types are prone to premature degrada- 
tion. These equipment types may require more-frequent 
leak checks. 

A6.4 Integrity Assessment 

The inspections for this threat are normally conducted 
per the requirements of the O&M procedures. These 
procedures detail when inspections and maintenance of 
equipment shall be performed and what specific action 
is required. Additional or more-frequent inspections 
may be necessary if the equipment has a leak and failure 
history. 
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Fig. A6 Integrity Management Plan, Equipment Threat 
(Gasket and O-Ring, Control/Relief, Seal/Pump Packing; Simplified Process: Prescriptive) 



A6.5 Responses and A/litigation 

Replacement or repair of the equipment may be 
required. 



A6.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, when 
inspecting gaskets at aboveground facilities, it is discov- 
ered that there has been a lightning strike. It is appro- 
priate to use this information when conducting risk 
assessments for the weather-related and outside force 
threat. 



A6.7 Assessment Interval 

The interval for assessment is contained within the 
operation and maintenance procedure for the specific 
types of equipment. 

Changes to the segment may drive reassessment. This 
change management is addressed in para. 11. 

A6.8 Performance Measures 

The following performance measures shall be docu- 
mented for the equipment threat, in order to establish 
the effectiveness of the program and for confirmation 
of the inspection interval: 

(a) number of regulator valve failures 
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Fig. A7 Integrity Management Plan, Third-Party Damage Threat [Third-Party inflicted Damage 
(Immediate), Vandalism, Previously Damaged Pipe; Simplified Process: Prescriptive] 



(b) number of relief valve failures 

(c) number of gasket or O-ring failures 

(d) number of leaks due to equipment failures 

A7 THIRD-PARTY DAMAGE THREAT [THIRD-PARTY 
INFLICTED DAMAGE (IMMEDIATE), VANDALISM, 
PREVIOUSLY DAMAGED PIPE] 

A7.1 Scope 

Paragraph A7 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for third-party damage. Third- 
party damage is defined in this context as third-party 
inflicted damage with immediate failure, vandalism, 
and previously damaged pipe (see Fig. A7). 



This paragraph outlines the integrity management 
process for third -party damage in general and also cov- 
ers some specific issues. Pipeline incident analysis has 
identified third-party damage among the causes of past 
incidents. 

A7.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected in support of 
performing risk assessment and for special considera- 
tions, such as identifying severe situations requiring 
more or additional activities. 

(a) vandalism incidents 

(b) pipe inspection reports (bell hole) where the pipe 
has been hit 
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(c) leak reports resulting from immediate damage 

(d) incidents involving previous damage 

(e) in-line inspection results for dents and gouges at 
top half of pipe 

(f) one-call records 

(g) encroachment records 

A73 Criteria and Risk Assessment 

Review of data may show susceptibility to certain 
types of third-party inflicted damage. Deficiencies in 
these areas require mitigation as outlined below. Because 
third-party damage is a time-independent threat, even 
with the absence of any of these indicators, third-party 
damage can occur at any time and strong prevention 
measures are necessary, especially in areas of concern. 

Specific land uses, such as agricultural lands with 
shallow depth of cover, may be more susceptible to third- 
party damage. 

A7.4 integrity Assessment 

Observance of encroachments or third-party damage 
is accomplished during patrols and leak surveys con- 
ducted as required by the operations and maintenance 
procedures. However, in the case of incidents involving 
previously damaged pipe, it is frequently found after 
the fact that the defect was revealed indirectly even 
though it may have been adequately described by a 
previous inspection such as an in-line inspection. There- 
fore, the operator should investigate suspicious indica- 
tions discovered by inspections that cannot be directly 
interpreted, but may be correlated with known excava- 
tion activities revealed by one-call records or other 
encroachment records. 

A7-5 Responses and Mitigation 

Mitigation of third-party damage is through preven- 
tive actions or repair of damage found as a result of 
inspections, examinations, or tests performed. The oper- 
ator shall ensure that third-party damage prevention 
programs are in place and functioning. Additional pre- 
vention activities may be warranted as provided in para. 
7, such as development of a damage prevention plan. 

A7.6 Other Data 

During the inspection and examination activities, the 
operator may discover other data that should be used 
when performing risk assessments for other threats. For 
example, w 7 hen monitoring an encroachment, exposed 
pipe may indicate active external corrosion. It is appro- 
priate to use this information when conducting risk 
assessments for external corrosion. 

A7.7 Assessment Interval 

Assessment shall be performed periodically. It is rec- 
ommended that it be performed annually. Changes to 
the segment may drive reassessment. Change manage- 
ment is addressed in para. 11. 



A7.8 Performance Measures 

The following performance measures shall be docu- 
mented for the third-party threat in order to establish 
the effectiveness of the program and for confirmation 
of the inspection interval: 

(a) number of leaks or failures caused by third-party 
damage 

(b) number of leaks or failures caused by previously 
damaged pipe 

(c) number of leaks or failures caused by vandalism 

(d) number of repairs implemented as a result of 
third-party damage prior to a leak or failure 



A8 INCORRECT OPERATIONS THREAT 

A8.1 Scope 

Paragraph A8 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for incorrect operations. Incorrect 
operations are defined in this context as incorrect 
operating procedures or failure to follow a procedure 
(see Fig. A8). 

This paragraph outlines the integrity management 
process for incorrect operations in general and also cov- 
ers some specific issues. Pipeline incident analysis has 
identified incorrect operations among the causes of past 
incidents. 

A8.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected in support of 
performing risk assessment and for special considera- 
tions, such as identifying severe situations requiring 
more or additional activities. 

(a) procedure review 7 information 

(b) audit information 

(c) failures caused by incorrect operation 

A8.3 Criteria and Risk Assessment 

If the data shows the operation and maintenance are 
performed in accordance with operation and mainte- 
nance procedures, the procedures are correct, and that 
operating personnel are adequately qualified to fulfill 
the requirements of the procedure, no additional assess- 
ment is required. Deficiencies in these areas require miti- 
gation as outlined below. 

A8.4 Integrity Assessment 

The audits and reviews are normally conducted on 
an ongoing basis. These inspections are conducted by 
company personnel and /or by third-party experts. 
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Fig. A8 Integrity Management Plan, Incorrect Operations Threat (Simplified Process: Prescriptive) 



A8*5 Responses and Mitigation 

Mitigation in this instance is prevention. The operator 
shall ensure that procedures are current, the personnel 
are adequately qualified, and that the following of proce- 
dures is enforced. 

The operator should have a program to qualify opera- 
tion and maintenance personnel for each activity that 
they perform. This program should include initial quali- 
fication and periodic reassessment of qualification. Cer- 
tification by recognized organizations may be included 
in this program. 

In addition, a strong internal review or audit program 
by in-house experts or third-party experts is necessary. 



A8.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, when 
reviewing records required by procedures, it is discov- 
ered that there have been several unreported encroach- 
ments by third parties. It is appropriate to use this 
information when conducting risk assessments for third- 
party damage. 

A8.7 Assessment interval 

Assessment shall be performed periodically and is 
recommended to be performed annually. 
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Changes to the segment may drive revision of proce- 
dures and additional training of personnel. Change 
management is addressed in para. 11. 

A8.8 Performance Measures 

The following performance measures shall be docu- 
mented for the incorrect operations threat, in order to 
establish the effectiveness of the program and for confir- 
mation of the inspection interval: 

(a) number of leaks or failures caused by incorrect 
operations 

(b) number of audits /reviews conducted 

(c) number of findings per audit/ review, classified 
by severity 

(d) number of changes to procedures due to audits/ 



A9 WEATHER-RELATED AND OUTSIDE FORCE 

THREAT (EARTH MOVEMENT, HEAVY RAINS OR 
FLOODS, COLD WEATHER, LIGHTNING) 

A9.1 Scope 

Paragraph A9 provides an integrity management plan 
to address the threat, and methods of integrity assess- 
ment and mitigation, for weather-related and outside 
force concerns. Weather-related and outside force is 
defined in this context as earth movement, heavy rains 
or floods, cold weather, and lightning (see Fig. A9). 

This paragraph outlines the integrity management 
process for weather- related and outside force threats in 
general, and also covers some specific issues. Pipeline 
incident analysis has identified weather-related and out- 
side force damage among the causes of past incidents. 

A9.2 Gathering, Reviewing, and Integrating Data 

The following minimal data sets should be collected 
for each segment and reviewed before a risk assessment 
can be conducted. This data is collected in support of 
performing risk assessment and for special considera- 
tions, such as identifying severe situations requiring 
more or additional activities. 

(a) joint method (mechanical coupling, acetylene 
weld, arc weld) 

(b) topography and soil conditions (unstable slopes, 
water crossings, water proximity, soil liquefactions sus- 
ceptibility) 

(c) earthquake fault 

(d) profile of ground acceleration near fault zones 
(greater than 0.2 g acceleration) 

(e) depth of frost line 

(f) year of installation 

(g) pipe grade, diameter, and wall thickness (internal 
stress calculation added to external loading; total stress 
not to exceed 100% SMYS) 

Where the operator is missing data, conservative 
assumptions shall be used when performing the risk 



assessment or, alternatively, the segment shall be priori- 
tized in a higher category based on the expected worst 
case of the missing data. 

A9.3 Criteria and Risk Assessment 

Pipe may be susceptible to extreme loading at the 
following locations: 

(a) where the pipeline crosses a fault line 

(b) where the pipeline traverses steep slopes 

(c) where the pipeline crosses water or is adjacent to 
water, or where the river bottom is moving 

(d) where the pipeline is subject to extreme surface 
loads that cause settlement to underlying soils 

(e) where blasting near the pipeline is occurring 

(f) when the pipe is at or above the frost line 

(g) W'here the soil is subject to liquefaction 
(h) where ground acceleration exceeds 0.2 g 

At locations meeting any of the above, the threat shall 
be evaluated. At locations where facilities are prone to 
lightning strikes, the threat shall be evaluated. 

A9.4 Integrity Assessment 

For weather- related and outside force threats, integ- 
rity assessments, including inspections, examinations, 
and evaluations, are normally conducted per the require- 
ments of the O&M procedures. Additional or more- 
frequent inspections may be necessary, depending on 
leak and failure information. 

A9.5 Responses and Mitigation 

Repairs or replacement of pipe shall be in accordance 
with the ASME B31.8 Code and other applicable indus- 
try standards. Other methods of mitigation may include 
stabilization of the soil, stabilization of the pipe or pipe 
joints, relocation of the pipeline, lowering of the pipeline 
below the frost line for cold-weather situations, and pro- 
tection of aboveground facilities from lightning. 

Prevention activities are most appropriate for this 
threat. If a pipeline falls within the listed susceptibilities, 
line patrolling should be used to perform surface assess- 
ments. In certain locations, such as known slide areas 
or areas of ongoing subsidence, the progress of the 
movement should be monitored. 

A9.6 Other Data 

During the inspection activities, the operator may dis- 
cover other data that should be used when performing 
risk assessments for other threats. For example, when a 
pipeline is patrolled, evidence of third-party encroach- 
ment may be discovered. It is appropriate to use this 
information when conducting risk assessments for the 
third-party damage threat. 

A9.7 Assessment Interval 

Changes to the segment, or the land use around the 
segment, may drive reassessment if the changes affect 
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Fig. A9 Integrity Management Plan, Weather-Related and Outside Force Threat 
(Earth Movement, Heavy Rains or Floods, Cold Weather, Lightning; Simplified Process: Prescriptive) 



pipeline integrity. If no changes are experienced, reas- 
sessment is not required. Change management is 
addressed in para. 11. 

A9.8 Performance Measures 

The following performance measures shall be docu- 
mented for the weather-related and outside force threat, 



in order to establish the effectiveness of the program 
and for confirmation of the inspection interval: 

(a) number of leaks that are weather-related or due 
to outside force 

(b) number of repair, replacement, or relocation 
actions due to weather-related or outside force threats 
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DIRECT ASSESSMENT PROCESS 



This Appendix provides information about the direct 
assessment process. Direct assessment is one integrity 
assessment methodology that can be used within the 
integrity management program. 



Bl EXTERNAL CORROSION DIRECT ASSESSMENT 

External corrosion direct assessment (ECDA) is a 
structured process that is a method for establishing the 
integrity of underground pipelines. As described herein, 
it applies to external corrosion on pipeline segments. 
The process integrates facilities data, and current and 
historical field inspections and tests, with the physical 
characteristics of a pipeline. Nonintrusive (typically 
aboveground or indirect) examinations are used to esti- 
mate the success of the corrosion protection. The ECDA 
process requires that some excavations be made. Excava- 
tions confirm the ability of the indirect examinations to 
locate active and past corrosion locations on the pipeline, 
as well as areas of significant coating damage at which 
corrosion could occur. In the overall ECDA process, such 
evaluations are defined as direct examinations. Post- 
assessment is required to determine a corrosion rate to 
set the reinspection interval, reassess the performance 
measures and their current applicability, plus ensure the 
assumptions made in the previous steps remain correct. 

The ECDA process, therefore, has the following four 
components: 

(a) pre- assessment 

(b) indirect examinations 

(c) direct examinations 

(d) post-assessment 

The focus of the ECDA approach described in this 
Standard is to identify locations where external corro- 
sion defects may have formed. It is recognized that evi- 
dence of other threats, such as mechanical damage and 
stress corrosion cracking (SCC), may be detected during 
the ECDA process. While implementing ECDA, the 
operator is advised to conduct examinations that will 
also detect no.nextern.al corrosion threats. 

The prescriptive ECDA process requires the use of 
at least two indirect examination methods, verification 
checks by excavation and direct examination, and post- 
assessment validation (some indirect examination tools 
can be used to detect corrosion on uncoated pipe; further 
work is being pursued on this issue). The process has 
been designed to allow it to be used as an initial baseline 



inspection of a pipeline segment. In addition, it can be 
modified for a performance-based plan. 

Bl.l Pre-Assessment 

The pre-assessment step provides guidance for selec- 
tion of each pipeline segment being considered and then 
the appropriate indirect examination method. Data inte- 
gration and analyses are also used to identify or define 
ECDA regions along the pipeline being evaluated. An 
ECDA region is an area within a pipeline segment(s) 
that the data indicates is suitable for the same indirect 
examination methods. Different ECDA regions can use 
different sets of complementary indirect examination 
methods. 

An operator must begin by integrating the historical 
knowledge of the pipeline, including facilities informa- 
tion, operating history, and the results of prior 
aboveground indirect examinations and direct examina- 
tions of the pipe, to assess the integrity of the pipe. 
Nonm.andato.ry Appendix A lists the minimum set of 
pipeline data that shall be reviewed for external corro- 
sion threats, but additional data may be collected to 
improve effectiveness. These data should be analyzed 
to estimate the extent and likelihood of prior corrosion. 
Other factors, such as adjacent pipelines, encroaching 
structures, or significant operational changes that may 
impede ECDA, should also be considered. 

This pre-assessment step estimates locations of prior 
and active corrosion. The operator must determine if 
the ECDA processes can be used in these locations. 

After ECDA regions are defined, the operator is to 
select at least two indirect examination methods: one 
primary and a second complementary examination 
method. Two tools are required, because no one method 
reliably locates indications of defects under all condi- 
tions. The secondary (complementary) method is to be 
selected based on the expectation that it should validate 
the first and possibly identify areas that may have been 
missed by the primary method. A tertiary method 
should be considered for areas where the first two meth- 
ods provide conflicting results. 

B1.2 Indirect Examinations 

The primary and complementary indirect examina- 
tions are used to detect coating defects. First the operator 
performs the primary examination of the regions identi- 
fied above. The second step is examination of the same 
region with the complementary method. Locations for 
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complementary examination should include those that 
may have presented some difficulty during primary 
examination, all areas of special concern, or where recent 
changes (as indicated by historical data) have occurred. 
This secondary method must evaluate at least 25% of 
each ECDA region. 

Primary and complementary examination results are 
compared to determine if new faults have been identi- 
fied. If new coating fault locations are identified during 
the complementary examination, the operator must 
explain the cause of the discrepancy and /or conduct 
additional (tertiary) indirect examinations. If additional 
coating faults are identified by the tertiary examination 
and /or the additional corrosion faults identified during 
complementary examination are not readily explained, 
the operator must return to the pre-assessment stage 
and select an alternative assessment method. 

Within each ECDA region, the coating faults should 
be characterized (e.g., as isolated or continuous) and 
prioritized based on expected corrosion severity from 
the indirect examination data. For example, based on 
pipeline history, the operator may use the corrosion state 
(e.g., anodic/anodic, anodic/cathodic, or cathodic/ 
cathodic) to determine which coating faults are most 
likely to correspond to the severely corroded areas. 
Those areas where the potential for severe corrosion is 
highest should receive excavation priority 

Evaluations of all wall losses found are to be used 
to establish appropriate reinspection and /or retesting 
intervals. The same indirect examination methods may 
not be appropriate for every pipeline or segment being 
evaluated. Changes to the methodologies may be war- 
ranted, depending on the inspection results. 

B1.3 Direct Examinations 

This stage requires excavations to expose the pipe 
surface for metal-loss measurements, estimated corro- 
sion growth rates, and measurements of corrosion mor- 
phology estimated during indirect examination. The 
goal of these excavations is to collect enough information 
to characterize the corrosion defects that may be present 
on the pipeline segment being assessed and validate the 
indirect examination methods. 

Direct examinations are to be made at one or more 
locations from each ECDA region in which coating faults 
have been found and one or more locations where para. 
B1.2 found no anomalies. All corrosion defects found 
during each direct examination should be measured, 
documented, and remediated as required. 

At each excavation, the operator should measure and 
record generic environmental characteristics (such as 
soil resistivity, hydrology, drainage, etc.). This data can 
be used to estimate corrosion rates. Average corrosion 
rates related to soil resistivity are provided in Table Bl. 

If the operator can provide a sound technical basis 
for using other corrosion rates or estimates based on 



Table Bl Corrosion Rates Related to Soil 
Resistivity 



Corrosion Rate, 
mils/year 



Soil Resistivity, ohm-cm 



3 

6 

12 



> 15 000 and no active corrosion 
1 000-15 000 and/or active corrosion 
< 1 000 (worst case) 



direct examination measurements, the actual rate can 
be used in lieu of those shown in the above table. 

The severity of all corrosion defects at the excavated 
coating fault areas should then be determined using 
ASME B31G or a similar method. The maximum dimen- 
sions of possible corrosion at unexamined coating defect 
locations must be estimated as follows: 

(a) if no other data are available, it must be assumed 
that the maximum defect dimensions are twice that of 
the largest defect depth and length measured during 
direct examination. 

(b) alternatively, statistical analysis results of defect 
severity from the corrosion measurements performed 
during direct examination can be used to estimate the 
defect severity at other coating faults. In this case, the 
operator must excavate and perform direct examinations 
on a large enough sample of coating faults to make a. 
statistical estimate of the structural integrity of 
remaining corrosion defects at an 80% confidence level. 

The operator is to continue excavations, measure- 
ments, categorization, and repairs until the remaining 
defects with their associated growth rates are such that 
there will be no structurally significant defects in the 
pipeline segment before the next integrity assessment is 
performed. 

B1.4 Post-Assessment 

Post-assessment sets reinspection intervals, provides 
a validation check on the overall ECDA process, and 
provides performance measures for integrity manage- 
ment programs. The reinspection interval is a function 
of the validation and repair activity 

For the ECDA prescriptive program, if the operator 
chooses to excavate all the indications found by indirect 
examination and repairs all defects that could grow to 
failure in 10 years, then the reinspection interval shall 
be 10 years. If the operator elects to excavate a smaller 
set of indications, then the interval shall be 5 years, 
provided an evaluation is performed, to ensure all defects 
that could grow to failure in 10 years (at an 80% confi- 
dence level) are repaired. 

In the ECDA prescriptive program for pipeline seg- 
ments operating at or below 30% SMYS, the reinspection 
interval is also determined by the level of repair and 
corresponding interval, and the much thicker pipe wall, 
as follows. If the operator chooses to excavate all the 
indications found by indirect examination and repairs 
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all defects that could grow to failure in 20 years, the 
reinspection interval shall be 20 years. If the operator 
elects to excavate a smaller set of indications, then the 
interval shall be 10 years, provided an evaluation is 
performed to ensure all defects that could grow to failure 
in 20 years (at an 80% confidence level) are repaired. 

The validation check on the overall ECDA process 
consists of performing at least one additional excavation. 
This excavation is to be performed at the coating defect 
location that was estimated to contain the next most 
severe defect not previously subjected to a direct exami- 
nation. Corrosion severity at this location should be 
determined and compared with the maximum severity 
predicted during the direct examinations. 

(a) If the actual corrosion defect severity is less than 
half of the maximum predicted severity validation is 
complete. 

(b) If the actual corrosion severity is between the max- 
imum predicted severity and one-half of the maximum 
predicted severity, double the predicted maximum 
severity and do a second recalibration dig. If the actual 
corrosion is again less than the maximum predicted 
severity, then validation is complete. If not, the ECDA 
process may not be appropriate and the operator must 
reevaluate and reset the growth rate prediction. The 
operator must then perform additional direct examina- 
tions as required and repeat the post-assessment evalu- 
ation. 

(c) If the actual corrosion severity is greater than the 
maximum predicted severity the ECDA process may 
not be appropriate and the operator must reevaluate 
and reset the growth rate prediction. The operator must 
perform additional direct examinations as required and 
repeat the post-assessment evaluation. 

ECDA validation may also be performed using histori- 
cal data from prior excavations on the same pipeline. 
Prior excavation locations must be assessed to determine 
that they are equivalent to the ECDA region being con- 
sidered and such a comparison is valid. If validity is 
established, then maximum corrosion depths may be 
estimated from the prior data. 

B2 INTERNAL CORROSION DIRECT ASSESSMENT 

Internal corrosion direct assessment (ICDA) is a struc- 
tured process to assess the integrity of gas transmission 
lines that normally carry dry gas but may suffer from 
short-term upsets of wet gas or free water (or other 
electrolyte). Local examination of inclines along a pipe- 
line where an electrolyte such as water first accumulates 
provides information about the remaining length of 
pipe. If these locations have not corroded, then other 
locations further downstream are less likely to accumu- 
late electrolyte and therefore can be considered free from 
corrosion. These downstream locations w T ould not 
require examination. 



Internal corrosion is most likely to occur where water 
first accumulates. Predicting the locations of water accu- 
mulation (if upsets occur) serves as a method for prio- 
ritizing local examinations. Predicting where water first 
accumulates requires know 7 ledge about the multiphase 
flow behavior in the pipe. ICDA applies between any 
feed points until a new input or output changes the 
potential for electrolyte entry or flow characteristics. 

Local examinations are performed where electrolyte 
accumulation is predicted. For most pipelines it is 
expected that excavations and inspection by ultrasonic 
NDE will be required to measure the remaining wall 
thickness at that location. Once a site has been exposed, 
internal corrosion monitoring method(s) (e.g., coupon, 
probe, UT sensor) may allow an operator to extend the 
reinspection interval and benefit from real-time monitor- 
ing in the locations most susceptible to corrosion. There 
may also be some applications where the most effective 
approach is to run an in-line inspection tool for a portion 
of pipe and use the results to assess the downstream 
internal corrosion where a pig cannot be run. If the 
locations most susceptible to corrosion are determined 
to be free from damage, the integrity of a large portion 
of pipeline mileage has been assured. 

This ICDA process is meant to assure gas containment 
for all gas transmission pipelines. 

B2.1 Pre-Assessment 

Pre-assessment determines whether ICDA is appro- 
priate to assess the internal condition of a pipeline with 
respect to internal corrosion. The ICDA method is appli- 
cable for gas lines that normally carry dry gas but may 
suffer from short-term upsets of wet gas or free water (or 
other electrolyte). The pre-assessment requires a facility 
description and collection of related historical data on 
operations and inspections, including upsets and 
repairs. 

If it can be demonstrated that a pipeline section never 
contained water or other electrolytes, then ICDA is 
unnecessary downstream of that location until the next 
feed injection point. If, by performing ICDA, significant 
corrosion is found throughout a pipeline, ICDA for that 
gas transmission line is inappropriate and other integrity 
assessment technologies, such as ILI or hydrostatic test- 
ing, shall be used. 

B2.2 Selecting Local Examination Points 

Internal corrosion damage is most likely to exist where 
water first accumulates. Predicting the locations of water 
accumulation (if upsets may have occurred) serves as 
the primary method for targeting local examinations. 
Predicting where water first accumulates relies on multi- 
phase flow calculations that depend on several parame- 
ters, including elevation change data. ICDA applies to 
any length of pipe until a new input or output changes 
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the environment. Corrosion is possible only in the pres- 
ence of an electrolyte and the presence of corrosion dam- 
age indicates that an electrolyte existed at that location. 
It should be noted that the absence of corrosion does 
not provide information about liquid accumulation. For 
pipelines in which the gas flow direction is periodically 
reversed, the predictions of where water will accumulate 
should be made considering both directions of gas flow; 
i.e., liquid can accumulate in either or both directions 
from a point of entry into the pipeline. 

Low liquid volumes generally travel down a gas trans- 
mission pipeline by film flow or by droplets. Film flow 
is considered the primary transport mechanism. Because 
gas transmission pipelines carry nominally dry gas most 
of the time, water droplets are expected to evaporate 
because of the favorable mass transfer conditions. Water 
droplets in a gas phase that is unsaturated with respect 
to water are expected to evaporate. The forces of shear 
stress imposed by the moving gas and gravity, deter- 
mined by pipe inclination, drive film flow along a pipe. 
Holdup occurs when the force of gravity is larger than 
the shear stress effect. A critical angle beyond which 
electrolyte accumulates can be predicted through multi- 
phase flow calculations. 

B23 Local Examination 

Local examinations are performed where an electro- 
lyte is most likely to accumulate. For most pipelines, it is 



expected that an excavation and inspection by ultrasonic 
thickness measurements will be required. These and 
other monitoring methods may serve as local examina- 
tion tools. There may be cases where corrosion monitor- 
ing (e.g., coupons or electronic probes) can serve as local 
examination methods. 

If the locations most susceptible to corrosion are deter- 
mined to be free from damage, the integrity of a large 
portion of pipeline mileage has been assured and 
resources can be focused on pipelines where internal 
corrosion is determined to be more likely. If corrosion 
is found, a potential integrity threat has been identified 
and measures to mitigate the corrosion can be taken, 
and the method is also considered successful. 

B2.4 Post-Assessment 

Post-assessment validates the ICDA process for a spe- 
cific pipeline section and guides the reassessment inter- 
val. The operator must perform one or more additional 
digs at predicted downstream water accumulation sites 
with inclination angles greater than the critical angle. If 
the locations most susceptible to corrosion are deter- 
mined to be free from damage, the integrity of a large 
portion of pipeline mileage has been assured. If corro- 
sion is found in areas where the pipeline inclination is 
greater than the estimated critical inclination angle, then 
the estimate of the critical inclination angle should be 
reevaluated and additional new areas selected for local 
examination. 
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PREPARATION OF TECHNICAL INQUIRIES 



Cl INTRODUCTION 

The ASME B31 Committee, Code for Pressure Piping, 
will consider written requests for interpretations and 
revisions of the Code rules, and develop new rules if 
dictated by technological development. The Commit- 
tee's activities in this regard are limited strictly to inter- 
pretations of the rules or to the consideration of revisions 
to the present rules on the basis of new 7 data or technol- 
ogy. As a matter of published policy, ASME does not 
approve, certify, rate, or endorse any item, construction, 
proprietary device, or activity, and, accordingly, inquir- 
ies requiring such consideration w 7 ill be returned. More- 
over, ASME does not act as a consultant on specific 
engineering problems or on the general application or 
understanding of the Code rules. If, based on the inquiry 
information submitted, it is the opinion of the Commit- 
tee that the inquirer should seek professional assistance, 
the inquiry will be returned with the recommendation 
that such assistance be obtained. 

Inquiries that do not provide the information needed 
for the Committee's full understanding will be returned. 



(b) Background. State the purpose of the inquiry, which 
would be either to obtain an interpretation of Code rules 
or to propose consideration of a revision to the present 
rules. Provide concisely the information needed for the 
Committee's understanding of the inquiry, being sure 
to include reference to the applicable Code Section, Edi- 
tion, Addenda, paragraphs, figures, and tables. If 
sketches are provided, they shall be limited to the scope 
of the inquiry. 

(c) Inquiry Structure 

(1) Proposed Question(s). The inquiry shall be stated 
in a condensed and precise question format, omitting 
superfluous background information, and, where 
appropriate, composed in such a w T ay that "yes" or "no" 
(perhaps with provisos) would be an acceptable reply. 
The inquiry statement should be technically and editori- 
ally correct. 

(2) Proposed Reply(ies). Provide a proposed reply 
stating what it is believed that the Code requires. If, in 
the inquirer's opinion, a revision to the Code is needed, 
recommended wording shall be provided in addition to 
information justifying the change. 



C2 REQUIREMENTS 

Inquiries shall be limited strictly to interpretations of 
the rules or to the consideration of revisions to the pres- 
ent rules on the basis of new data or technology Inquiries 
shall meet the following requirements: 

(a) Scope. Involve a single rule or closely related rules 
in the scope of the Code. An inquiry letter concerning 
unrelated subjects will be returned. 



C3 SUBMITTAL 

Inquiries should be submitted in typewritten form; 
however, legible handwritten inquiries will be consid- 
ered. They shall include the name and mailing address 
of the inquirer, and be mailed to the following address: 

Secretary 

ASME B31 Committee 

Three Park Avenue 

New York, NY 10016-5990 
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